Senior Security Analyst

Our client within the QLD Government is looking for a dedicated Senior Security Analyst to Lead and Deliver a large Security Project for an inital 18 month contract with possible extension. WFH Flex on Offer + Market Rates !

THE ROLE

Our client is looking for an exceptional and dedicated Senior Security Analyst to provide technical security analysis services to the Department's Program. The position will be required to work closely with a range of stakeholders across multiple agencies to support the Security Architecture in the various cyber security activities being undertaken by the program.

KEY RESPONSIBILITIES

• Perform internal security testing of the programs solutions in a continual basis. This will include penetration testing the following solution components:
  A) Web applications
  B) REST APIs
• Use OWASP ZAP as the primary tool for performing penetration tests. Testing must include the OWASP Top 10 API and Web Vulnerabilities, plus custom testing identified post analysis of the test target.
• Use OWASP ZAP for API fuzzing.
• Hosting weekly meetings with the Development team to manage issues identified by the penetration testing.
• Create and use the Threat and Risk Assessments (TRA) as the guiding mechanism, to work with projects to ensure the security mitigations identified get implemented in a timely manner.

ESSENTIAL REQUIREMENTS

• Demonstrated ability in performing Threat and Risk Assessments.
• Demonstrated ability to perform advanced level of penetration testing.
• Demonstrated experience in documenting security systems.

To be considered for the role click the 'apply' button or for more information about this and other opportunities please contact Jack McDougall 07 3339 5611 or email: [email protected] and quote the above job reference number.

Paxus values diversity and welcomes applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds and people living with a disability. If you require an adjustment to the recruitment process, including the application form in an alternate format, please contact me on the above contact details.