Lead Penetration Tester

Trident Group; Australia; On-site; AUD 120,000 - 160,000; Full time

Job summary

Trident Group in Australia is seeking a Lead Penetration Tester to oversee cyber penetration testing and vulnerability assessments across a range of technologies for a federal government client. You will lead test execution, review findings, and mentor junior staff while coordinating with system owners to ensure remediation is completed and security controls are strengthened.

Desirable certifications such as CHECK Team Leader or CREST are preferred; OSCP, GPEN, CEH are considered an asset.

Qualifications

• Extensive hands-on penetration testing experience across web, mobile, and infrastructure.
• Leadership of security testing teams and mentoring staff.
• Experience with threat simulation and vulnerability management processes.

Responsibilities

• Lead cyber penetration testing and vulnerability assessments across diverse technologies for a federal government client.
• Oversee test plan execution, risk analysis, and delivery of clear remediation recommendations.
• Review reports, brief stakeholders, and ensure remediation is completed and controls strengthened.
• Coach and train staff to support succession planning and testing excellence.

Skills

Penetration testing

Team leadership

Forensic tasks

Threat simulation

Job description

# Lead Penetration TesterJob Reference: #9990Federal Government ClientNV1 RequiredAustralian CitizenServices AustraliaACT, SA, QLD, VICContractCloses 27/10/2026CHECK Team LeaderCREST Certified Tester (Infrastructure)CREST Certified Tester (Web Applications)CompTIA Security+CompTIA PenTest+Certified Ethical Hacker (CEH)CREST Registered Penetration Tester (CRT)Offensive Security Certified Expert 3 (OSCE3)GIAC Penetration Tester (GPEN)Cyber Penetration TestingVulnerability AssessmentsWeb Application Penetration TestingMobile Penetration TestingInfrastructure Penetration TestingThreat SimulationDigital ForensicsRisk AnalysisShare## About the RoleOversee the execution of test cases using in-depth technical analysis of risks and typical vulnerabilities; lead cyber penetration testing and vulnerability assessments using relevant tools and methods against a variety of technologies; conduct and lead complex threat simulation activities to identify weaknesses and/or opportunities in technical security controls; oversee the catalogue of test findings and potential measures; oversee and approve security testing plans; provide highly technical subject matter expertise to system owners and stakeholders to improve system security posture; conduct highly complex analysis and research to identify improvements to cyber threat tools, techniques and procedures; manage and coordinate a variety of risk analysis and assessments on cyber security matters; perform web application and mobile penetration testing against complex enterprise platforms using a variety of technologies; conduct infrastructure penetration testing against enterprise grade systems; collaborate with system owners to develop test scope and preparation for testing, ensuring remediation has been completed effectively; review reports, briefs and documentation and communicate technical findings and recommendations; transfer highly technical skills and knowledge to other staff through continuous coaching and on-the-job training to support succession planning; lead and support the operations of a team, including setting priorities and managing performance, resources and workflows; exercise delegations in line with legislation and guidelines.Key Responsibilities:• Lead cyber penetration testing and vulnerability assessments using relevant tools and methods against a variety of technologies; oversee the execution of test cases using in-depth technical analysis of risks and typical vulnerabilities.• Perform web application and mobile penetration testing against complex enterprise platforms, and infrastructure penetration testing against enterprise grade systems.• Conduct and lead complex threat simulation activities to identify weaknesses and opportunities in technical security controls; undertake penetration exploits as part of simulated attack exercises.• Oversee and approve security testing plans; oversee the catalogue of test findings and potential measures; collaborate with system owners on test scope, preparation and confirmation that remediation has been completed effectively.• Provide highly technical subject matter expertise to system owners and stakeholders; conduct highly complex analysis and research to improve cyber threat tools, techniques and procedures; manage and coordinate risk analysis and assessments on cyber security matters.• Basic digital forensic tasks (e.g. first responder) without supervision, and some experience of more complex forensic work (specialist tools to recover, preserve and analyse data) under supervision.• Review reports, briefs and documentation; communicate technical findings and recommendations clearly to technical and non-technical audiences.• Lead and support the operations of a team: set priorities, manage performance, resources and workflows; coach and train other staff to support succession planning; exercise delegations in line with legislation and guidelines.• Certifications: CHECK Team Leader, CREST Certified Tester (Infrastructure or Web Applications) or equivalents are named in the essential criteria. Desirable (not mandatory): CompTIA Security+, CompTIA PenTest+, Certified Ethical Hacker, CREST Registered Penetration Tester, OSCE3, GIAC Penetration Tester.## RequirementsEssential Criteria: 1. Undertakes basic forensic tasks (e.g. first responder) without supervision. Has some experience of more complex tasks (e.g. using specialist tools to recover, preserve and analyse data) under supervision. 2. Uses commercial and bespoke tools to conduct complex penetration testing without close supervision and/or leads teams undertaking complex penetration tests. Undertakes penetration exploits as part of a simulated attack exercise under direction. Appropriate and relevant certifications include CHECK Team Leader, CREST Certified Tester (Infrastructure or Web Applications) or equivalents.Desirable CriteriaThe following are advantageous but not mandatory:• Desirable qualifications (not mandatory): CompTIA Security+, CompTIA PenTest+, Certified EthicalHacker (CEH), CREST Registered Penetration Tester (CRT), Offensive Security Certified Expert 3(OSCE3), GIAC Penetration Tester (GPEN).Interested in this role? Submit your application today.