Lead Penetration Tester

We are seeking experienced Lead Penetration Testers with NV1 Clearance to support a large Federal Government agency. You will lead complex security testing and simulated attacks across enterprise applications and infrastructure, identifying vulnerabilities and providing practical recommendations to strengthen security.

This role combines hands-on technical delivery with team leadership, stakeholder engagement and mentoring.

• Long Term- initial 12-month- Federal Government Contract
• Location: Open to Canberra, Melbourne, Brisbane or Adelaide; hybrid arrangements considered
• Clearance: NV1 MANDATORY

Key responsibilities

• Lead penetration testing and vulnerability assessments across web applications, mobile applications and enterprise infrastructure.
• Conduct complex threat simulations to assess the effectiveness of security controls.
• Develop, review and approve testing plans, scopes and methodologies.
• Analyse findings, communicate business risks and recommend remediation priorities.
• Work with system owners to coordinate testing and validate remediation.
• Review technical reports and provide specialist security advice to stakeholders.
• Coach testers and coordinate team priorities, resources and workflows.

Skills and experience

• Extensive hands-on penetration testing experience across complex enterprise web applications and Windows/Linux infrastructure.
• Experience delivering complex penetration tests independently and leading testing teams.
• Practical experience conducting simulated attack exercises using commercial and bespoke tools.
• Forensics experience, including independently performing basic first-response tasks and supporting more complex evidence recovery, preservation and analysis.
• Strong technical reporting skills and the ability to explain findings to technical and business stakeholders.
• Experience mentoring staff and improving testing tools, techniques and methodologies.

Relevant qualifications such as CREST, CHECK Team Leader, OSCE3, GIAC Penetration Tester, CEH or CompTIA PenTest+ are highly desirable.

Location and working arrangements

Positions are available in Canberra, Melbourne, Brisbane and Adelaide. The first six weeks will be onsite. Hybrid arrangements may then be considered, generally requiring at least three days per week in the office. Candidates must live within reasonable travelling distance of their nominated office.

Security clearance

An NV1 security clearance is required before commencing the contract. Candidates with a current NV1 or higher clearance are encouraged to apply.

How to apply

Please submit your updated CV, including your clearance level, preferred location and availability. Shortlisted candidates will be asked to provide a one-page suitability pitch addressing the essential criteria.