xptsoftware.zohorecruit.in

NewBe an early applicant APACLead

3 days ago

Lead Penetration Tester- NV1

Cybersecurity Network Security Penetration Testing Succession Planning

Lead penetration tester who conducts and oversees complex penetration testing and vulnerability assessments (web, mobile, infrastructure) against enterprise platforms, simulates attacks, reports findings, and leads/coaches a security testing team. Must be able to obtain Australian Negative Vetting Level 1 clearance.

last month

DevSecOps Specialist

APACContract

Application Security CI/CD DAST GitLab OWASP +8 skills

Senior AppSec/DevSecOps specialist hired for a fixed-term client engagement in Sydney to design and roll out SAST/SCA scanning across GitLab SaaS and on-prem estates: define target-state scanning architecture, pipeline gates and triage workflows, set secure-coding standards, and train developers. Deep GitLab security scanning and CI/CD expertise required.

last month

DevSecOps Business Analyst

Acceptance Criteria Automation CI/CD Container Security DevSecOps +4 skills

A business analyst role on DevSecOps initiatives in Sydney: gathering and documenting business, security, and compliance requirements, defining CI/CD security controls (SAST, SCA, secrets management, container security), and tracking vulnerability remediation and compliance metrics while supporting SDLC automation and DevSecOps maturity.

2 months ago

IAM Project Manager

IAM Program Management SailPoint

Project manager role leading end-to-end delivery of enterprise Identity and Access Management (IAM) projects in Sydney — owning plans, budgets, RAID logs, governance, and coordination across IAM engineering, business, and vendor teams. Requires 8-12+ years of IT project/program management experience and deep IAM knowledge, ideally SailPoint and PAM.

2 months ago

Penetration Tester

Automation Cissp Cybersecurity Penetration Testing

Lead-level security tester (8+ years) in Melbourne who performs advanced penetration testing, vulnerability assessments, and source code security reviews for a client's systems, validates exploitable vulnerabilities, reports business risk, and mentors the team. Requires an application security certification (e.g. OSCP, CREST, SANS, CISSP).

2 months ago

LeadRisk Assessor_Cybersecurity

Agile Cism Cissp Cybersecurity DevOps +4 skills

Senior cybersecurity risk professional (Lead Risk Assessor) who leads security risk assessments across projects, products and technology initiatives for a large enterprise, translating technical risks into business terms for executive stakeholders. Requires deep GRC experience and familiarity with frameworks like ISO 27001, NIST and PCI-DSS.

4 months ago

GRC Consultant - Cyber Lead

APACLead

Agile Automation Cism Cissp Cloud +12 skills

Cyber GRC lead who governs non-OS vulnerability management across enterprise applications and platforms: defining frameworks and governance forums, running risk assessments, exception/risk-acceptance lifecycles, and tooling/automation strategy while delivery teams execute remediation. Requires strong GRC and cyber-risk experience with ISO 27001, NIST, CIS and tools like Qualys, Tenable, or Snyk.

5 months ago

Network Security Engineer

DevOps Firewall GitHub Jenkins Jira +2 skills

Network Security Engineer based in Sydney focused on firewall engineering and remediation work, supported by DevOps tooling including BitBucket, Jenkins, JIRA, GitHub, Terraform, and Vault. The role requires at least 6 years of experience.

5 months ago

SOC Analyst

Cisco Cybersecurity Firewall Gap Analysis Microsoft Sentinel +6 skills

Hands-on cyber security engineer role (listed as SOC Analyst) supporting NIST CSF / NIST 800-series assessments, triaging penetration test findings, and driving remediation across endpoint, infrastructure, network, and SIEM platforms (Splunk, Sentinel, Cisco, Imperva) for regulated/government environments in Melbourne.

6 months ago

SOC Analyst

AWS Cloud Confluence Iis Kubernetes +8 skills

Senior SOC Analyst (5+ years) in Sydney who monitors security systems, coordinates and reports on security incidents, and advises stakeholders on security risk. Hands-on work spans Ivanti RBVM/Qualys, Trellix, Sophos, HCL AppScan, Google SecOps (SIEM/SOAR), PKI, Cloud WAF and AWS.

7 months ago

Network and Security Engineer

CCNP Cisco DNS ITSM Network Security

Network and security engineer (10+ years) in Perth, Australia, operating, patching and upgrading network/security infrastructure — Cisco firewalls/routing/switching/wireless, F5 load balancers, proxies, certificates and email/DNS standards — while providing L2-3 support in a 24/7 environment, including HBF security systems.

10 months ago

WDAC Implementation Specialist / Endpoint Security Engineer

Intune Microsoft Defender PowerShell XML Zero Trust

Designs, deploys, and maintains Windows Defender Application Control (WDAC) policies across enterprise Windows endpoints: authoring XML policies, deploying via Intune/ConfigMgr/PowerShell, running audit-mode validation, monitoring with Microsoft Defender tooling, and training users. Core stack: WDAC, Intune, ConfigMgr, PowerShell, Defender.

last year

SailPoint IAM Business Analyst

Agile Gdpr IAM RBAC SailPoint +3 skills

Business analyst role focused on identity and access management: gathering and documenting requirements, defining access governance policies and roles, and supporting SailPoint (IdentityIQ/IdentityNow) design, testing, and access certification campaigns. Requires 5+ years as an IAM business analyst with knowledge of SSO, MFA, PAM, and RBAC.