Senior Cybersecurity Specialist I: Red Team at Woolworths

Introduction

• Support the goal of keeping the organization safe from cyber security threats. The primary focus is on penetration testing and red teaming, alongside a good bit of purple teaming. Build and mature the ability to test, validate and improve cyber security controls. This is a technical role requiring relevant practical experience.

Job description

• Work with the rest of the security operations team to proactively identify vulnerabilities and validate controls across the Woolworths environment.
• Build and mature the red and purple teaming maturity, leveraging technology and automation with the goal of continual control validation.
• Define and manage a risk-based methodology for application and infrastructure penetration testing.
• Coordinate application and infrastructure penetration testing according to the methodology and where relevant, in line with compliance requirements (e.g., PCI).
• Help drive and validate remediation of red team and penetration testing findings.
• Consult with application development teams during projects and initiatives.
• Work with, and coordinate, external providers where and when relevant.
• Support the operation team in responding to security incidents.

Minimum requirements

• Deep technical skills.
• Scripting and automation experience.
• Ability to explain the common security flaws as well as potential ways to address them.
• Relentless pursuit of threat identification and remediation.
• Relevant research and translation into actionable intelligence.
• Great people skills to engage with the various stakeholders across the business, while ensuring that professionalism is maintained.
• Ability to engage with and contribute to the Information Security community. 

JOB REQUIREMENTS

• Grade 12 and relevant degree/diploma/qualification (3 years)
• 7 years relevant experience in cyber security, up to 10 years in IT
• Hands on practical experience in red teaming and penetration testing

Additional Criteria

• Relevant qualifications and certifications such as OSCP, OSWE, SANS and CREST
• Practical experience with the MITRE ATT&CK framework is advantageous
• Software development experience is advantageous
• Ability to script and automate processes
• May be required to assist outside of working hours

Deadline:26th March,2026