Note: The job is a remote job and is open to candidates in USA. CyberCX is the leading provider of professional cyber security and cloud services across Australia and New Zealand. They are seeking a Senior Security Consultant responsible for conducting penetration testing and vulnerability assessments while providing security expertise to clients.
Responsibilities
- Deliver application, network, systems, and infrastructure penetration tests for customers, using creative and outside the box solutioning to explore unconventional attack paths
- Ability to perform the top five and emerging STA services offered by the Practice to a high standard with adequate supervision
- Prepare high-quality reports detailing security issues, making recommendations, and identifying solutions, contribute to presentations and discussions with customers around testing performed, key results, recommendations, and the next steps
- Build and promote strong, long-lasting relationships with a diverse range of customers, and identify and explore opportunities within existing and new customers
- Contribute to a culture of empowerment, collaboration, and accountability through consistent employee engagement
- Assist with R&D, innovation, and practice improvement activities, under supervision
- Stay current with emerging threats, tools, and techniques in the cybersecurity landscape
- Meet utilization targets and ensure on-budget delivery
- Travel: Up to 10%
Skills
- Applicants must be US Citizens eligible for Security Clearance
- Proficiency in penetration testing tools such as Metasploit, Burp Suite, Nmap, and custom scripting in Python, Bash, or JavaScript
- Penetration testing certifications such as OSCP preferred but not essential
- A minimum of 2 years as a security testing practitioner / cyber practitioner in which you have developed capability in managing client expectations, time management, technical delivery and report writing
- Excellent written and verbal communication skills with the ability to explain technical findings to both technical and non-technical stakeholders
- Strong knowledge of networking, operating systems (Linux, Windows, Active Directory), and web application security
- Tertiary qualification in information systems, software development or a similar field, or equivalent industry experience
Company Overview