Lead Penetration Tester

NW Technology; Canberra; Hybrid; AUD 140,000 - 190,000; Full time

Job summary

NW Technology is seeking an experienced Lead Penetration Tester with NV1 clearance to lead security testing across enterprise applications and infrastructure. This role blends hands-on delivery with team leadership, mentoring and stakeholder engagement.

Open to candidates in Canberra, Melbourne, Brisbane or Adelaide, with six weeks onsite to start. Hybrid arrangements may follow, requiring regular in-office presence.

Qualifications

• Extensive hands-on penetration testing across enterprise web apps and Windows/Linux infrastructure.
• Experience delivering complex penetration tests independently and leading testing teams.
• Desirable qualifications: CREST, CHECK Team Leader, OSCE3, GIAC Penetration Tester, CEH, CompTIA PenTest+.

Responsibilities

• Lead penetration testing and vulnerability assessments across web apps, mobile apps and enterprise infrastructure.
• Conduct complex threat simulations to assess security controls.
• Develop, review and approve testing plans, scopes and methodologies.
• Analyse findings, communicate business risks and prioritize remediation.
• Coordinate testing with system owners and validate remediation.
• Review technical reports and provide security guidance to stakeholders.
• Coach testers and prioritize team workstreams.

Skills

Penetration testing

Team leadership

Threat simulations

Reporting to stakeholders

Mentoring testers

Coordinating testing

Forensics

Job description

We are seeking experienced Lead Penetration Testers with NV1 Clearance to support a large Federal Government agency. You will lead complex security testing and simulated attacks across enterprise applications and infrastructure, identifying vulnerabilities and providing practical recommendations to strengthen security.

This role combines hands-on technical delivery with team leadership, stakeholder engagement and mentoring.

• Location: Open to Canberra, Melbourne, Brisbane or Adelaide; hybrid arrangements considered
• Clearance: NV1 MANDATORY

Key responsibilities

• Lead penetration testing and vulnerability assessments across web applications, mobile applications and enterprise infrastructure.
• Conduct complex threat simulations to assess the effectiveness of security controls.
• Develop, review and approve testing plans, scopes and methodologies.
• Analyse findings, communicate business risks and recommend remediation priorities.
• Work with system owners to coordinate testing and validate remediation.
• Review technical reports and provide specialist security advice to stakeholders.
• Coach testers and coordinate team priorities, resources and workflows.

Skills and experience

• Extensive hands-on penetration testing experience across complex enterprise web applications and Windows/Linux infrastructure.
• Experience delivering complex penetration tests independently and leading testing teams.
• Practical experience conducting simulated attack exercises using commercial and bespoke tools.
• Forensics experience, including independently performing basic first-response tasks and supporting more complex evidence recovery, preservation and analysis.
• Strong technical reporting skills and the ability to explain findings to technical and business stakeholders.
• Experience mentoring staff and improving testing tools, techniques and methodologies.

Relevant qualifications such as CREST, CHECK Team Leader, OSCE3, GIAC Penetration Tester, CEH or CompTIA PenTest+ are highly desirable.

Location and working arrangements

Positions are available in Canberra, Melbourne, Brisbane and Adelaide. The first six weeks will be onsite. Hybrid arrangements may then be considered, generally requiring at least three days per week in the office. Candidates must live within reasonable travelling distance of their nominated office.

Security clearance

An NV1 security clearance is required before commencing the contract. Candidates with a current NV1 or higher clearance are encouraged to apply.