Lead and plan attack surface detection for NAB Group to identify the assets, exposure discoverable on internet such as DNS, Apps not having SSLs, HSTS enabled, APIs without authentication etc.
Provide direction for NAB in the usage of Attack Surface Scanning as a key discovery and remediation for the bank for externally facing assets.
Promote the use of ASM scanning and establish a BAU rhythm to effectively detect and scan NAB's digital assets, including those of Subsidiaries and externally hosted 3rd party vendors.
Scan for attack surface for the organisation and validate the exposures using various technologies.
Develop technology configuration policies to support the secure use of NAB's technology footprint in the building of new infrastructure and scheduled scanning of key security configurations.
Familiar with cloud and its different components
Able to use scripting to automate the attack surface discoveries and run scanning
Able to understand the code to identify the exposure/vulnerability
Familiar with Kali Linux/Unix commands
Promote the use of Findings Management tooling and establish a BAU rhythm to support the remediation of NAB's digital assets, including those of Subsidiaries and externally hosted 3rd party vendors.
Provide on-call support to assist the Cyber Defence and Incident Management teams to respond to critical exposures or concerns.
Collaborate in the development of Reporting to assist NAB understand control effectiveness & of NAB's vulnerability exposure.
Use excellent communication skills to articulate technical security requirements and recommendations in a business context.
YOUR SKILLS AND EXPERIENCE
8+ years full-time experience in enterprise security roles
5+ years of experience in Application Security and Vulnerability Management
2+ years of experience in Penetration Testing
2+ Years of experience in People Management
Experience on any Attack surface management tool
Hands on experience with Vulnerability scanning and penetration testing tools such as Nessus, Qualys, Nmap, Netsparker, Nuclei, Burpsuite, Metaspolit, etc.
Ability to write scripting to automate the scanning and testing scenarios.
A developed awareness of best practice in security and a drive to self-educate in the field
Ability to engage stakeholders and drive change.
Experience with Vulnerability scanning for Infrastructure and Applications
Experience with Cloud, such as AWS and knowledge of their services/applications.
An understanding of Security principles and Web application attack methodologies
Proven relationship management experience with suppliers of technology products and services
Methodical, analytical approach with outstanding attention to detail
Excellent verbal and written English communication skills
Ability to attend to the detail on multiple concurrent tasks while meeting various deadlines
Ability to develop thorough, clear and concise action plans/objectives
THE BENEFITS AND PERKS
We appreciate and reward our colleagues who do great work every day - from excelling for our customers, to taking ownership of an issue to get it resolved. Here's how we support our people with a range of exclusive benefits.
Generous compensation and benefit package
Attractive salary
20-day paid annual leave and 7-day paid sick leave
13th month salary and Annual Performance Bonus
Premium healthcare for yourself and family members
Monthly allowance for team activities
Premium welcome kit and occasional gifts of appreciation
Extra benefits on your work anniversary
Exciting career and development opportunities
Large scale products with modern technologies in banking domain
Clear roadmap for career advancement in both technical and leadership pathways
Access to digital learning platform such as Udemy
Consistent and high-quality leadership training through the Distinctive Leadership program (DLP)
Specialist capabilities and accreditations in key skill areas such as Cloud Engineering, Digital, Data, Security and SREs (Site reliability engineers)
Sponsored English course with native teachers
Opportunity for training in Australia
Professional and engaging working environment
Hybrid working model and excellent work-life balance
State-of-the-art & modern Agile office
Food and beverages in the office pantry
Employee Assistance Program to improve your physical and mental health
Annual team activities and company events
A solid and talented team behind you - great people who love what they do
A DIVERSE AND INCLUSIVE WORKPLACE WORKS BETTER FOR EVERYONE
We know that our people make us who we are. That's why we have built a culture of respect - where everyone feels valued and appr
Benefits
Health insurancePerformance bonus
Additional Information
Job Posting End Date:
Worker Type:
Maximum Term/Fixed Term (Fixed Term)
We're seeking a key member who have had a proven track record of providing technology-based security exposure detection services and Findings Management across NAB's key assets to meet security objectives.
Nab · 15 Tran Bach Dang An Khanh Ward