NHMRC Penetration Testing

Indigitise is seeking an experienced Penetration Testing Specialist to support the National Health and Medical Research Council (NHMRC) in conducting a targeted penetration testing exercise across its external infrastructure, cloud environment, network and Wi-Fi. The engagement will assess the effectiveness of existing cyber controls, identify vulnerabilities and test the organisations resilience against realistic external attack scenarios. Key responsibilities: Identify and map the external attack surface. Conduct external infrastructure and asset discovery. Perform grey-box penetration testing. Assess internet-facing firewalls and network infrastructure. Test Azure cloud tenancies and Microsoft 365 exposure. Assess Wi-Fi security from an adjacent attacker perspective onsite. Test lateral movement scenarios. Assess the potential compromise of a standard Azure Virtual Desktop session or Microsoft 365 credentials. Identify vulnerabilities, attack paths and control weaknesses. Provide cl...