Lead Penetration Tester

ASJ Tech Pty Ltd; Canberra; Hybrid; AUD 180,000 - 240,000; Full time

Job summary

ASJ Tech Pty Ltd. is seeking a Lead Penetration Tester to oversee complex security testing for a major Federal Government agency. The role covers web, mobile, and infrastructure testing, with threat simulations and actionable remediation guidance. Hybrid work is available after an initial onsite period.

You will mentor testers and shape testing methods while ensuring high-quality outcomes across enterprise environments and stakeholders. NV1 clearance is required or obtainable.

Qualifications

• Extensive hands-on penetration testing experience, including leading teams on complex engagements.
• Strong web applications and infrastructure testing skills using commercial and bespoke tools.
• First-responder forensics experience with evidence recovery and analysis.
• Current NV1 clearance (or ability to obtain it).
• Certifications highly regarded: CREST CRT/CCT, CHECK Team Leader, OSCP/OSCE3, GIAC GPEN, CEH or PenTest+.

Responsibilities

• Lead penetration testing of web, mobile, and infrastructure environments (Windows and Linux).
• Plan and approve security testing activities and test cases.
• Conduct simulated attack exercises to identify weaknesses in security controls.
• Collaborate with system owners to scope testing and confirm remediation.
• Report and present technical findings to stakeholders.
• Coach team members and manage priorities and workflows.

Skills

Penetration testing

Web testing

Infrastructure testing

Threat simulation

Team leadership

Forensics

NV1 clearance

Tools

PenTest tools

Job description

Lead Penetration Tester | NV1 | Federal Government | Canberra, Melbourne, Brisbane or Adelaide

ASJ Tech is seeking experienced Lead Penetration Testers for a major Federal Government agency. This is a 12-month labour hire contract, starting February 2027, with hybrid working available after an initial 6 weeks onsite.

About the role

You’ll lead complex penetration testing and vulnerability assessments across enterprise web applications, mobile platforms and infrastructure. You’ll run threat simulation exercises, approve test plans and give system owners practical recommendations to strengthen their security posture. You’ll also mentor and coach other testers and help shape the team's testing methods, tools and techniques.

What you’ll do

• Lead penetration testing of web, mobile and infrastructure (Windows and Linux) environments
• Plan, oversee and approve security testing activities and test cases
• Conduct simulated attack exercises to identify weaknesses in security controls
• Work with system owners to scope testing and confirm remediation
• Report and present technical findings to stakeholders
• Coach team members and manage priorities and workflows

What we’re looking for

• Extensive hands-on penetration testing experience, including leading teams on complex engagements
• Strong web application and infrastructure testing skills using commercial and bespoke tools
• First-responder forensics experience, ideally with exposure to evidence recovery and analysis
• Current NV1 clearance (or the ability to obtain it)
• Certifications highly regarded: CREST CRT/CCT, CHECK Team Leader, OSCP/OSCE3, GIAC GPEN, CEH or PenTest+

Location:

Canberra, Melbourne, Brisbane or Adelaide (hybrid)

Contract:

12 months, with an estimated start of February 2027