Lead Penetration Tester – Cyber Security (NV1)

Location: Canberra, ACT | Brisbane, QLD | Melbourne, VIC | Adelaide, SA Engagement: 12-month contract, with extension potential of up to 24 months Working Arrangements: Hybrid, subject to operational requirements Security Clearance: Active NV1 security clearance is mandatory About the Role We’re seeking an experienced Lead Penetration Tester to conduct complex penetration testing, vulnerability assessments and simulated cyber attacks across enterprise environments. This is a senior technical role combining hands-on penetration testing expertise with technical leadership, risk analysis and stakeholder engagement. You’ll assess web applications, mobile platforms and enterprise infrastructure to identify security weaknesses, validate technical controls and provide practical recommendations to strengthen security posture. You’ll also lead testing activities, oversee test plans and findings, provide specialist security advice, and mentor other team members. Key Responsibilities Lead complex penetration testing and vulnerability assessments across enterprise systems and applications. Conduct web application and mobile penetration testing using a range of tools, techniques and methodologies. Perform infrastructure penetration testing across Windows and Linux environments. Plan, oversee and approve security testing activities, including test cases, scope and preparation. Conduct simulated attack exercises and threat simulations to identify weaknesses in technical security controls. Analyse vulnerabilities, assess risks and oversee the documentation of findings and remediation recommendations. Work with system owners and stakeholders to agree testing scope and validate remediation activities. Provide specialist technical advice to improve system security and strengthen security controls. Research and recommend improvements to cyber security testing tools, techniques and procedures. Review technical reports, briefs and documentation, communicating findings clearly to technical and non-technical audiences. Coach and mentor team members, transferring technical knowledge and supporting capability development. Lead team operations, including prioritising work, coordinating resources and managing workflows. About You You’re an experienced penetration tester with strong hands-on technical capability and the confidence to lead complex security testing engagements. You can identify and exploit vulnerabilities within authorised testing environments, assess the associated risks and translate technical findings into actionable recommendations. You’re also comfortable working with senior stakeholders, coordinating testing activities and supporting the development of other cyber security professionals. Essential Technical Skills & Experience Considerable experience conducting web application penetration testing across complex enterprise platforms built using a variety of technologies. Strong experience conducting infrastructure penetration testing across enterprise-grade Windows and Linux environments. Demonstrated ability to lead complex penetration tests with minimal supervision, using commercial and bespoke testing tools. Experience with simulated attack exercises, vulnerability analysis and the assessment of technical security controls. Strong technical reporting, risk assessment and stakeholder communication skills. Experience overseeing test plans, findings, remediation activities and testing workflows. Ability to provide technical guidance, coaching and knowledge transfer to other team members. Forensics Capability Experience undertaking forensic activities, including initial response tasks and supporting more complex investigations using specialist tools to recover, preserve and analyse data. Desirable Certifications Relevant qualifications are advantageous but not mandatory, including: CompTIA Security+ or PenTest+ Certified Ethical Hacker (CEH) CREST Registered Penetration Tester Offensive Security Certified Expert-level certifications (OSCE3) GIAC Penetration Tester (GPEN) Equivalent recognised penetration testing certifications Why Apply? Take a lead role in complex enterprise cyber security testing. Work across web applications, mobile platforms and enterprise infrastructure. Apply your technical expertise to improve security controls and reduce organisational risk. Share your knowledge and help build penetration testing capability within a specialist team. Secure a 12-month contract with potential extensions of up to 24 months. Security Requirement Candidates must have an NV1 security clearance . Working Arrangements The role is based in Canberra, Brisbane, Melbourne or Adelaide. Candidates should be prepared to work onsite for the first six weeks, with hybrid arrangements considered thereafter, subject to operational requirements. Hybrid arrangements generally require a minimum of three days onsite per week. Apply Now If you have strong penetration testing experience across enterprise applications and infrastructure, along with the technical capability to lead complex security assessments, we’d like to hear from you. Apply now with your current CV and a summary of your relevant experience, or reach out via email ( [email protected] ) for a confidential chat.