Lead Penetration Tester
Description
12 Months + 2 × 12-Month Extensions
Active NV1 Security Security Clearance Required
About the Role
Gov Recruit is seeking an experienced Lead Penetration Tester to support a Federal Government agency in strengthening its cyber security posture through advanced penetration testing, vulnerability assessments and simulated cyber attack exercises.
This is a senior technical leadership opportunity involving complex security testing across enterprise infrastructure, web applications and mobile platforms. You will lead testing activities, identify security vulnerabilities, provide actionable remediation recommendations and work closely with technical teams and system owners to improve security controls.
The successful candidate will provide technical leadership, oversee testing methodologies and deliver high-quality security assessments while mentoring team members and supporting continuous improvement.
The role is available in Canberra, Adelaide, Brisbane or Melbourne, with hybrid working arrangements considered after an initial six-week onsite period. Ongoing arrangements generally require a minimum of three days per week onsite.
Key Responsibilities
Lead and conduct complex penetration testing and vulnerability assessments across enterprise environments.
Perform web application and mobile application penetration testing using industry-standard tools and methodologies.
Conduct infrastructure penetration testing across Windows and Linux environments.
Design and oversee security testing plans, test cases and simulated cyber attack exercises.
Identify, analyse and document vulnerabilities, security weaknesses and potential attack vectors.
Assess the effectiveness of technical security controls and recommend appropriate remediation measures.
Manage testing findings, risk assessments and remediation tracking.
Collaborate with system owners and technical stakeholders to define testing scope and validate remediation activities.
Research emerging cyber threats, vulnerabilities and penetration testing techniques.
Prepare and review detailed technical reports, briefs and security recommendations.
Provide specialist technical advice to improve enterprise security posture.
Mentor and coach team members, transfer technical knowledge and support capability development.
Lead team activities, manage priorities and coordinate testing resources and workflows.
Required Skills & Experience
Extensive experience conducting penetration testing across complex enterprise IT environments.
Strong expertise in web application penetration testing and vulnerability assessment.
Demonstrated experience testing enterprise infrastructure hosted on Windows and Linux platforms.
Experience leading complex penetration testing engagements and simulated attack exercises.
Strong understanding of common vulnerabilities, exploitation techniques and security testing methodologies.
Experience using commercial and bespoke penetration testing tools.
Ability to analyse technical findings, assess risks and provide practical remediation recommendations.
Experience preparing comprehensive security assessment reports and communicating findings to technical and non-technical stakeholders.
Knowledge of digital forensics, evidence preservation and forensic analysis techniques.
Proven leadership, stakeholder engagement and mentoring capabilities.
Active NV1 security clearance is mandatory before commencement.
Desirable Qualifications & Certifications
CREST Registered Penetration Tester or equivalent.
CREST certifications in infrastructure or web application testing.
Offensive Security certifications, including OSCE3.
GIAC Penetration Tester (GPEN).
Certified Ethical Hacker (CEH).
CompTIA Security+ or PenTest+.
CHECK Team Leader or equivalent qualifications.
Click Quick Apply and submit your CV.
For further details, please contact Eman Wally:
📞 0435 139 946
✉️ eman.wally@govrecruit.com.au