Lead Penetration Tester

Peoplebank; Sydney; Hybrid; AUD 170,000 - 230,000; Full time

Job summary

Peoplebank is seeking a Lead Penetration Tester to join a high-performing cyber security team. This 12-month contract with extension is hybrid and Australia-wide, requiring extensive penetration testing, red team operations, and advisory support to executives.

The role covers testing across web, mobile, APIs, cloud, Kubernetes, and networks, with a focus on embedding security into design and delivery while developing testing tooling. Australian NV1 eligibility is required.

Qualifications

• Extensive penetration testing and offensive security experience.
• Experience leading offensive security engagements and red team operations.
• Ability to analyse complex security problems and communicate complex findings clearly.

Responsibilities

• Conduct penetration testing across web, mobile, APIs, cloud, and Kubernetes environments.
• Lead offensive security engagements and red team operations.
• Identify, validate and report vulnerabilities with remediation guidance.
• Develop tools, scripts or exploits and security testing tooling.
• Provide expert technical advice to senior stakeholders and produce high-quality reports.

Skills

Penetration testing

Offensive security

Red team operations

Stakeholder engagement

Security reporting

Tools

Python

Golang

C

Kubernetes

AWS

Job description

12-Month Contract + 12-Month Extension | NV1 Eligible | Hybrid | Australia-Wide Locations

Are you an experienced Penetration Tester who thrives on identifying vulnerabilities before adversaries do?

We are seeking a Lead Penetration Tester to join a high-performing cyber security team responsible for protecting critical systems and services. This is a hands-on offensive security role suited to a senior cyber professional with deep penetration testing expertise across modern enterprise environments.
Working within a collaborative security function, you will conduct advanced penetration testing, red team activities and adversary emulation exercises while providing strategic security advice to technical and executive stakeholders.

Key Responsibilities

• Conduct penetration testing across web applications, mobile applications, APIs, cloud platforms and infrastructure environments.
• Perform network, wireless and infrastructure security assessments.
• Lead offensive security engagements and red team operations.
• Identify, validate and report security vulnerabilities and recommend remediation strategies.
• Develop proof-of-concept exploits and security testing tools.
• Collaborate with engineering, security and product teams to embed security into design and delivery processes.
• Support security monitoring, compliance and risk management initiatives.
• Provide expert technical advice to senior stakeholders.
• Produce high-quality technical reports, findings and recommendations.
• Contribute to continuous improvement of security testing methodologies and tooling.
• Extensive penetration testing and offensive security experience.
• Experience assessing:
  • Web Applications
  • Mobile Applications
  • APIs
  • Cloud Platforms
  • Kubernetes Environments
  • Networks & Wireless Infrastructure
• Strong understanding of network protocols and security architecture.
• Demonstrated experience conducting Red Team and adversary emulation activities.
• Ability to analyse complex security problems and develop innovative solutions.
• Experience developing tools, scripts or exploits using:
  • Python
  • Golang
  • C
  • Other scripting languages
• Strong stakeholder engagement and communication skills.

Lead Penetration Tester | EL1 Equivalent

Essential Experience

• Extensive penetration testing and offensive security experience.
• Experience assessing:
  • Web Applications
  • Mobile Applications
  • APIs
  • Cloud Platforms
  • Kubernetes Environments
  • Networks & Wireless Infrastructure
• Strong understanding of network protocols and security architecture.
• Demonstrated experience conducting Red Team and adversary emulation activities.
• Ability to analyse complex security problems and develop innovative solutions.
• Experience developing tools, scripts or exploits using:
  • Python
  • Golang
  • C
  • Other scripting languages
• Strong stakeholder engagement and communication skills.

Highly Regarded Certifications

One or more of the following certifications will be highly advantageous:

• OSCP
• OSCE
• GXPN
• GWAPT
• GMOB
• CREST Certifications

Desirable Experience

• Automated security testing and security tooling.
• AWS security and cloud penetration testing.
• Security documentation and technical reporting.
• DevSecOps and cloud-native security environments.

Requirements

• Australian Citizenship is mandatory.
• Ability to obtain and maintain a Negative Vetting Level 1 (NV1) Security Clearance.
• Available to work in a hybrid environment.
• Candidates located in ACT, NSW, VIC, QLD, SA, WA or TAS are encouraged to apply.

What's on Offer?

• Long-term contract opportunity.
• Work on complex, large-scale environments.
• Exposure to modern cloud, Kubernetes and enterprise security platforms.
• Opportunity to lead offensive security engagements and influence organisational security outcomes.
• Flexible hybrid working arrangements.

Peoplebank and Leaders IT are committed to creating a diverse and inclusive workplace where everyone belongs. We welcome applications from people of all backgrounds, identities, and experiences. If you need adjustments to the recruitment process due to your circumstances, please let us know—we’re here to support you.