Offensive Security Engineer

About the role

The Offensive Security Engineer will protect NRMA’s technology and data by finding exploitable weaknesses, validating security controls and supporting safer delivery across the technology environment.

Key responsibilities

• Plan and execute authorised security testing of web applications, APIs, infrastructure, networks, identity services and cloud workloads.
• Operate, administer and optimise SAST, DAST, CSPM and attack‑simulation tools.
• Embed security testing early in the software development lifecycle and integrate controls into CI/CD pipelines.
• Conduct penetration testing, security assessments, design reviews and threat modelling for material changes.
• Validate, triage and document findings, track remediation and retest resolved vulnerabilities.
• Use cloud security posture management tooling to assess cloud misconfigurations and compliance.
• Perform MITRE ATT&CK‑aligned control validation, adversary emulation and purple‑team activities.
• Automate discovery, testing, ticketing, evidence collection and reporting where practical.

Required profile

• Experience in cybersecurity, application security, penetration testing or DevSecOps.
• Strong knowledge of web, API and cloud security.
• Hands‑on experience with security testing tools (SAST, DAST, CSPM).
• Understanding of secure software development and CI/CD environments.
• Ability to automate tasks using Python or PowerShell.
• Excellent analytical, problem‑solving and stakeholder communication skills.

Required skills

• Python
• PowerShell
• SAST tools
• DAST tools
• CSPM platforms
• CI/CD pipeline integration
• Cloud security posture management
• MITRE ATT&CK framework
• OWASP Top 10
• PCI DSS
• ISO 27001
• NIST standards

What we offer

• Progressive flexibility, leave and well‑being benefits.
• Travel discounts on SIXT car rental, cruises and NRMA Holiday Parks.
• Complimentary myNRMA Rewards membership with roadside assistance and discounts.
• Discounts on NRMA personal insurance products.
• Opportunities to grow, progress or relocate within the NRMA Group.