Lead Penetration Tester

Role/s: 1 x EL1 Penetration Tester The EL1 Penetration Tester (Labour Hire) is accountable under broad direction to undertake very complex work that delivers quality outcomes across the functions of the NDIA. The position will exercise a considerable degree of independence to engage in very complex problem solving and issues management within the functions. The position requires exercising sound decision-making and judgement to produce senior level advice and support. The EL1 Penetration Tester (Labour Hire) will regularly conduct advanced penetration tests and ethical hacking to identify vulnerabilities in computer systems early thus helping prevent external threats that may inflict damage to NDIS. As an EL1 Penetration Tester (Labour Hire) you will be a subject matter expert in your field. You'll have the ability to prioritise and take ownership, as well as assist the broader Integrity Transformation and Technology Services Group with your knowledge and experience. You will be comfortable working collaboratively with both technical and non-technical resources with a high aptitude for learning in a fast-paced environment. Rate: The proposed rate should reflect candidate's skills and experience against the Evaluation Criteria. Candidates that do not demonstrate these criteria will not be assessed. Candidates should be aware that rates may be negotiated further as part of the selection process. Citizenship: As part of the eligibility and suitability requirement, NDIA seeks Labour Hire Workers who are Australian citizens only. Successful candidates will be required to furnish valid evidence of citizenship during the Pre-engagement Check. Labour Hire Licence: Applicable for ACT, VIC and QLD: Labour hire licences are required in the state that specified personnel are being contracted. Key duties and responsibilities Performing penetration testing of Mobile and Web applications and IT infrastructure. Provide feedback into the design and build phase to ensure security requirements are captured up front. Validating reported vulnerabilities, recommending appropriate mitigating strategies and coordinating the follow up with relevant team members. Work with Cyber Security teams and product owners to seek alignment between information security and business objectives. Providing strategic advice to Directors within the branch. Investigate potential complex security issues and engage stakeholders appropriately. Foster a positive culture within the teams aligned with Agency values. Work with the identity & access management team. Building and maintaining effective working relationships with internal and external stakeholders. Provide insight and integrate to monitoring and compliance tools. (NOTE: the key responsibilities of the role are based on current priorities and may change over time) Criteria The buyer has specified that each candidate must provide a one page pitch to address all criteria specified. This is equal to 5000 characters. Essential criteria 1. Demonstrated experience with offensive security and penetration testing across diverse platforms and technologies, including Mobile Apps, Web Applications, APIs, Kubernetes, Cloud environments, Networks, and Wireless infrastructures. 2. Knowledge and practical experience in network protocols. 3. Experience in Red Team Operations, conducting adversary emulation exercises. 4. Demonstrated high level conceptual, analytical, and problem-solving skills, and the ability to develop creative and innovative solutions to difficult and complex problems. 5. Ability to write tools and exploits in one or more languages such as Python, C, Golang, and scripting languages. 6. GMOB/OSCE/OSCP/GWAPT/GXPN certification is a distinctive plus (any of those). Desirable criteria 1. Proven ability to define automated testing requirements across multiple platforms. 2. Proven experience producing highly technical and procedure documentation. 3. Sound understanding of AWS cloud infrastructure. Opportunity summary Sellers can submit Up to 2 candidates Number of sellers invited More than 10 Number of candidates submitted Fewer than 10 RFQ closing time 01 Weeks 00 Days 12 Hours Send us feedback About Accessibility Privacy Terms of use Disclaimer and copyright An initiative of the Digital Transformation Agency The Australian Government acknowledges the Traditional Owners of Country throughout Australia and acknowledges their continuing connection to land, waters and community. We pay our respects to the people, the cultures and the Elders past and present. © Commonwealth of Australia