Description
A government department in Canberra is seeking the services of Security Penetration Testers for an upgraded website and online forms environment ahead of launch to a 'live' environment
Security penetration testing is required across a range of services, including website, online form submission and other related services.
Due to the nature of the work, it is expected that the services will be undertaken offsite.
The scope of the testing services includes:
1. security penetration testing of a website and associated infrastructure, including:
a. core website components, including Javascript and CSS libraries
b. an internally-developed tool that returns publicly available information for select cases.
2. Security penetration testing of online form-based services, including:
a. two online lodgement forms (one includes a customised online payments module)
b. an online document submission service and associated one-time code (SMS/Email) user authentication service.
3. Review and provide recommendations in relation to the implementation of the following cloud-hosted services which are accessed from within the Department's website:
a. one form used to collect email subscription details
b. two online survey forms
c. an external text-to-speech tool Embedded into all Department's webpages
Essential skills and experience:
Demonstrated experience in the delivery of quality security penetration testing services.
Awareness of, and adherence to, industry best-practice standards.
Understanding of the technical landscape in which the work will be carried out.
Formal security qualifications such as, but not limited to, CISSP, CEH, GIAC GPEN.
The role requires the candidate to be an Australian Citizen prior to commencement.
The role closes to applications by 2pm 12th November 2018.