British cybersecurity expert Jacob Riggs has been granted Australia’s ultra-selective 858 National Innovation visa after he responsibly disclosed a critical vulnerability in a live Department of Foreign Affairs and Trade (DFAT) platform during his application period. The 858 visa—formerly the Global Talent visa—is issued to fewer than 1 % of applicants worldwide and requires proof of internationally recognised achievement.
Riggs, frustrated by the lack of conventional accolades in the cybersecurity field, demonstrated his expertise by identifying and privately reporting the flaw, earning a place on DFAT’s vulnerability-disclosure honour roll. Canberra subsequently issued the visa, giving him immediate permanent-residence rights and a pathway to citizenship. He plans to relocate to Sydney in February to continue public-interest security research.
![UK security researcher wins coveted 858 Innovation visa after ethical hack of DFAT system]()
The case highlights how Australia’s talent-attraction settings are evolving to recognise non-traditional evidence of excellence, especially in critical technologies. Immigration lawyers say the precedent could encourage other elite tech candidates to submit verifiable real-world impact—bug-bounty wins, open-source projects or peer-reviewed code—rather than academic citations alone.
For employers, the story is a reminder that the 858 visa provides a fast, points-free route to permanent residence for top-tier talent but demands meticulous evidence. HR teams should review internal nomination processes to capture innovative achievements that sit outside typical CV metrics.
DFAT confirmed that no personal data were compromised and praised Riggs for adhering to responsible-disclosure protocols. The department says the incident strengthened its cyber-defences and underscores the value of constructive engagement with the global security community.
Riggs, frustrated by the lack of conventional accolades in the cybersecurity field, demonstrated his expertise by identifying and privately reporting the flaw, earning a place on DFAT’s vulnerability-disclosure honour roll. Canberra subsequently issued the visa, giving him immediate permanent-residence rights and a pathway to citizenship. He plans to relocate to Sydney in February to continue public-interest security research.
The case highlights how Australia’s talent-attraction settings are evolving to recognise non-traditional evidence of excellence, especially in critical technologies. Immigration lawyers say the precedent could encourage other elite tech candidates to submit verifiable real-world impact—bug-bounty wins, open-source projects or peer-reviewed code—rather than academic citations alone.
For employers, the story is a reminder that the 858 visa provides a fast, points-free route to permanent residence for top-tier talent but demands meticulous evidence. HR teams should review internal nomination processes to capture innovative achievements that sit outside typical CV metrics.
DFAT confirmed that no personal data were compromised and praised Riggs for adhering to responsible-disclosure protocols. The department says the incident strengthened its cyber-defences and underscores the value of constructive engagement with the global security community.
Source: Agility PR Newsroom
