Senior Engineer - Offensive Security (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Senior Engineer - Offensive Security (Cybersecurity): Delivering high-impact offensive security testing across applications, infrastructure, and cloud environments with an accent on penetration testing, vulnerability assessment, and DevSecOps integration. Focus on validating real-world business impact, collaborating with engineering squads to drive secure-by-design practices, and maturing the offensive security capability within the ANZ region.
Location: Must be based in Sydney, Australia (Hybrid role).
Company
is a leading global specialist in food and agribusiness banking, committed to adding long-term value for clients through a deep understanding of the agricultural sector.
What you will do
- Execute offensive security testing pipelines across applications, infrastructure, and cloud platforms.
- Deliver hands-on penetration testing and vulnerability assessments to validate exploitability.
- Partner with DevSecOps teams to tune automated security controls and support shift-left security.
- Collaborate with engineering and architecture teams to prioritize findings and provide actionable remediation guidance.
- Coordinate testing activities across the ANZ region, including external penetration testing schedules.
- Produce high-impact security reports for both technical and non-technical stakeholders.
Requirements
- Minimum 10 years of IT experience.
- Strong hands-on experience conducting penetration testing and offensive security assessments in complex environments.
- Solid understanding of offensive security frameworks such as OWASP, OSSTMM, PTES, NIST, and MITRE ATT&CK.
- Broad technical expertise across web applications, APIs, mobile, network infrastructure, cloud providers, and hardware/IoT.
- Proven ability to translate technical findings into understandable risks and remediation steps.
- Must be based in Sydney for this 12-month fixed-term contract.
Nice to have
- Experience with SAST and DAST tooling integration within the SDLC.
- Deep passion for ethical hacking and proactive security research.
Culture & Benefits
- Commitment to inclusion, belonging, and positive employee experiences.
- Values-driven environment focused on being Client Driven, Responsible, Professional, and Cooperative.
- Supportive team environment with a focus on professional growth and knowledge sharing.
- Hybrid work model providing flexibility.
Hiring process
- Review of resumes and covering letters.
- One or more online interviews to assess role and team fit.
- Potential technical assignment or assessment.
- Legal screening prior to commencement.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →