Hastha Solutions Pty Ltd
Security Testing Lead Specialist - Contract - Australia
Be an Early Applicant
Leads complex penetration tests, vulnerability assessments, secure code reviews, exploit-path analysis, and adversary emulation. Provides technical leadership, evaluates security controls, translates vulnerabilities into business risks, improves testing methodologies, supports secure architecture and shift-left practices, automates assessments within CI/CD pipelines, develops training, mentors security professionals, and manages quality assurance and vendor engagements.
Urgent
requirement of Security Testing Lead Specialist - Contract - Australia
Requirements
Key Accountabilities
Include:
- Lead and deliver high-complexity, high-assurance security assessments across customer’s systems, including advanced penetration testing, vulnerability assessments, and source code security reviews, focusing on real-world exploitability and attack path development.
- Provide authoritative technical leadership as a subject matter expert in security testing and secure development, acting as the primary escalation point for complex vulnerabilities, assessments, and adversary emulation activities.
- Evaluate the eƯ ectiveness of systems in protecting organisational data and maintaining intended functionality, and provide strategic recommendations to improve security posture and resilience.
- Identify and validate critical vulnerabilities, exploit paths, and attack vectors, including analysing scan outputs and manual testing results to assess risk and impact accurately.
- Translate technical findings into clear, actionable business risk insights, supporting informed decision making and prioritised remediation.
- Drive the evolution of security testing strategy, methodologies, and standards, ensuring alignment with industry best practices and continuous improvement across the function.
- Collaborate with the Security Testing – Senior Lead and broader cyber security teams to shape capability development, resourcing, and operational direction
- Assess existing security controls and practices against expected standards and recommend improvements to address gaps and uplift security maturity.
- Ensure delivery of high-quality security assessment reports, clearly articulating risks, impacts and recommended mitigations.
- Provide mentorship and technical guidance to uplift capability across both senior and junior team members.
- Apply a pragmatic, risk-based approach to all activities, balancing security requirements with business objectives, timelines, and operational constraints.
- Fulfil Health, Safety, and Environment (HSE) responsibilities in accordance with organisational policies and regulatory requirements.
Additional information:
- Provide technical leadership across the domain, including performing and leading complex assessments across multiple technical domains, and responding to escalated incidents and engagements.
- Provide input into customer’s Penetration Testing, Vulnerability Assessment and Secure Code processes, methodologies, standards, and corresponding roadmaps and enhancement plans
- Develop and deliver training for junior team members and the broader customer community to uplift security capability.
- Promote “shift-left” practices to enable the delivery of secure, high-quality code at speed.
- Provide guidance on application security architecture and secure design considerations.
- Develop scripts and contribute to automation initiatives to improve the eƯ iciency and eƯ ectiveness of security testing activities.
- Refine and define engagement processes, secure code artefacts, security criteria, and use cases.
- Collaborate with third parties, including vendors and newly acquired entities, to assess and uplift their security and development practices
- Conduct quality assurance reviews of deliverables produced within the Secure Code team to ensure high technical standards.
- Operate eƯ ectively in environments with ambiguous or conflicting requirements, consistently delivering high-quality outcomes aligned with Cyber Security expectations.
- Translate technical vulnerabilities into business risk for stakeholders in a timely manner, leveraging insights from the broader Cyber Security function. Confidential
- Apply a pragmatic approach to security testing, balancing business objectives, standards alignment, cost, time, and risk considerations.
- A minimum of 8 years’ experience in a Security Testing role.
- Experience and exposure to a variety of software delivery models, including DevOps and Waterfall.
- Significant experience in performing complex security assessments across a range of domain areas in a large corporate environment.
- Significant experience in implementing automated security assessment tools into CI/CD pipelines.
- Excellent working knowledge of Security Assessment tools, such as Vulnerability Scanners, Static Code Analysis and Software Composition Analysis tools.
- Ability to review and provide guidance and feedback on security assessment reports.
- Strong understanding of application security architecture principles, including transport security, authentication, authorisation, threat modelling, and logging and monitoring.
- Experience in training and developing people.
- Tertiary qualifications in Electrical/Electronic, Computer, Network or Software Engineering; Information/Cyber Security; IT or a related discipline.
- Demonstrable skillsets exceeding that expected of a person holding OSCE/OSWE or CREST – Certified qualifications for domain areas in scope for the position.
- Prior experience as a developer/software engineer is a significant advantage.
- Experience in developing security policy, standards, and security guidance.
- Significant experience in other domain areas of Cyber Security.
- A strong understanding of adjacent security dependencies including endpoint, application platforms, databases, network security technologies, and deployment frameworks.
- Current industry certification, including but not limited to:
- Offensive Security – OSCP, OSCE, OSWE
- CREST – Certified Level qualifications (CCT, CCSC, CCSAS, CCSAM)
- SANS – GPEN, GAWN, GWAPT, GXPN
- (ISC)² – CISSP, CCSP
- Offensive Security – OSCP, OSCE, OSWE
- Experience in managing engagements with external security vendors.
- Demonstrable history of developing exploits and zero-day discovery.
Duration: 06 Months and
possible extension
Eligibility: Australian/NZ
Citizens/PR Holders only
Email: [email protected]
Similar Jobs
Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
Leads executive-level governance, risk, and cybersecurity transformation engagements across APAC. Advises CROs, CISOs, CEOs, and boards on AI governance, identity governance, threat intelligence, compliance, and cyber resilience. Partners with Sales, Strategy, Engineering, Security, and Marketing teams to accelerate enterprise sales, shape go-to-market strategy, deliver thought leadership, and influence product roadmaps. Builds strategic customer relationships through executive briefings, roundtables, keynotes, and transformation advisory.
Top Skills:
Ai Control TowerArmisGovernance Risk And Compliance (Grc)Identity And Access Management (Iam)Iso 27001NistServicenowSoc 2Threat IntelligenceVezaZero Trust Architecture
Aerospace • Information Technology • Software • Cybersecurity • Design • Defense • Manufacturing
Graduate systems engineers will analyze customer requirements, develop and integrate aerospace and defence solutions, coordinate with software, hardware, safety, security, and support engineering teams, verify and validate designs, create engineering documentation, and support configuration management. The role involves multidisciplinary collaboration across aircraft, mission systems, sustainment, communications, and uncrewed systems programs while completing a structured 24-month graduate program.
Top Skills:
Communications SystemsComputer NetworksConfiguration ManagementMission SystemsSystems EngineeringVerification And Validation
Aerospace • Information Technology • Software • Cybersecurity • Design • Defense • Manufacturing
Graduate Structural Engineers provide engineering support for air vehicle structures throughout the product lifecycle. Responsibilities include investigating technical issues, resolving product defects, reviewing ground and flight-test reports, developing aircraft modification kits, preparing engineering documentation, and collaborating with multidisciplinary design and maintenance teams. The role is part of Boeing Defence Australia's 24-month graduate program and is based in Adelaide, Brisbane, or Williamtown.
Top Skills:
Air Vehicle StructuresGround And Flight TestingMilitary Aircraft Systems
What you need to know about the Sydney Tech Scene
From opera to comedy shows, the Sydney Opera House hosts more than 1,600 performances a year, yet its entertainment sector isn't the only one taking center stage. The city's tech sector has earned a reputation as one of the fastest-growing in the region. More specifically, its IT sector stands out as the country's third-largest, growing at twice the rate of overall employment in the past decade as businesses continue to digitize their operations to stay competitive.
