Lead Penetration Tester

Hatchit Studios; Melbourne; Hybrid; AUD 120,000 - 160,000; Full time

Benefits offered by this job

Hybrid work after onsite period

Long-term engagement

Competitive contract rates

Job summary

Hatchit Studios is seeking a Lead Penetration Tester for a labour hire contract with a major Australian Federal Government agency. The role requires leading complex penetration testing, vulnerability assessments and simulated cyber attack exercises across enterprise environments.

Initial onsite work for six weeks with a potential hybrid arrangement thereafter (minimum three days onsite per week). NV1 security clearance is required prior to commencement, and the contract runs 12 months with

Qualifications

• Hands-on experience with complex penetration testing and vulnerability assessments.
• Ability to lead testing engagements and security testing teams.
• Strong skills in reporting findings to technical and non-technical audiences.

Responsibilities

• Lead complex penetration testing and vulnerability assessments across enterprise environments.
• Conduct web and mobile application and infrastructure penetration testing.
• Plan and execute simulated cyber attacks to identify weaknesses and test controls.
• Develop, review and approve testing plans, methodologies and test cases.
• Undertake forensic activities, including initial incident response and analysis.
• Identify, document and assess vulnerabilities and remediation recommendations.
• Conduct testing across Windows and Linux environments.
• Collaborate with system owners to define scope and verify remediation.
• Prepare detailed technical reports and communicate findings to stakeholders.
• Provide technical leadership, mentoring and knowledge transfer to peers.

Skills

Penetration testing

Vulnerability assessments

Team leadership

Web app security

Infrastructure testing

Incident response

Digital forensics

Reporting & documentation

Stakeholder communication

Job description

Lead Penetration Tester – Federal Government (Multiple Positions)

Contract Duration: 12 months + potential extensions of up to 24 months

Estimated Start Date: February 2027

Security Requirement: NV1 Security Clearance required prior to commencement

About the Opportunity

Hatchit Studios is seeking experienced Lead Penetration Testers for labour hire contract opportunities with a major Australian Federal Government agency.

These roles involve leading complex penetration testing, vulnerability assessments and simulated cyber attack exercises across enterprise applications and infrastructure.

Successful candidates will identify security vulnerabilities, recommend remediation strategies and collaborate with technical teams and stakeholders to strengthen the security and resilience of critical government systems.

Working Arrangements: Candidates will be required to work onsite for the initial six weeks, with hybrid arrangements potentially available thereafter (typically a minimum of three days onsite per week).

Key Responsibilities

• Lead complex penetration testing and vulnerability assessments across enterprise environments.
• Conduct web application, mobile application and infrastructure penetration testing.
• Plan and execute simulated cyber attacks to identify security weaknesses and assess technical controls.
• Develop, review and approve penetration testing plans, methodologies and test cases.
• Undertake forensic activities, including initial incident response, evidence preservation and analysis.
• Identify, document and assess vulnerabilities, security risks and remediation recommendations.
• Conduct penetration testing across Windows and Linux environments.
• Collaborate with system owners and technical stakeholders to define testing scope and validate remediation activities.
• Prepare detailed technical reports and communicate findings to technical and non-technical stakeholders.
• Provide technical leadership, mentoring and knowledge transfer to other cyber security professionals.

Skills & Experience Required

• Extensive hands-on experience conducting complex penetration testing and vulnerability assessments.
• Demonstrated experience leading penetration testing engagements or technical security testing teams.
• Strong expertise in web application security testing across complex enterprise platforms.
• Proven experience performing infrastructure penetration testing across Windows and Linux environments.
• Experience conducting simulated attack exercises and evaluating security controls.
• Working knowledge of digital forensics, including evidence collection, preservation and analysis.
• Proficiency with commercial and bespoke penetration testing tools and methodologies.
• Strong understanding of cyber security risks, vulnerabilities, attack techniques and remediation strategies.
• Excellent technical documentation, reporting and stakeholder communication skills.
• Ability to work independently and provide technical leadership within complex enterprise environments.

Desirable Certifications:

• CREST Registered or Certified Penetration Tester
• Offensive Security certifications (including OSCE3 or equivalent)
• Certified Ethical Hacker (CEH)
• CompTIA PenTest+ or Security+
• CHECK Team Leader or equivalent

Why Apply?

• Work on high-impact cyber security initiatives supporting critical Australian Government services.
• Competitive contract rates.
• Long-term engagement with potential extensions.
• Flexible hybrid working arrangements following the initial onsite period, subject to agency approval.
• Opportunity to lead complex security testing engagements across enterprise-scale environments.
• Collaborate with experienced cyber security professionals and government stakeholders.