Lead Penetration Tester -Canberra, Brisbane, Melbourne and Adelaide

IT Alliance Australia; Canberra; Híbrido; AUD 140.000 - 200.000; Jornada completa

Descripción de la vacante

IT Alliance Australia is seeking a Lead Penetration Tester for work across Canberra, Brisbane, Melbourne, and Adelaide. The role requires coordinating complex penetration testing and vulnerability assessments, delivering detailed reports, and guiding a team to improve security posture.

Candidate must hold NV1 security clearance and be available for hybrid work arrangements. An extension of 24 months is available for the right profile, reflecting the program’s federal government context.

Formación

• Experiences in cyber penetration testing and vulnerability assessments.
• Ability to lead and coordinate testing across multiple platforms and teams.
• Demonstrated ability to communicate complex security findings clearly.

Responsabilidades

• Oversee execution of test cases with in-depth risk analysis.
• Lead cyber penetration testing and vulnerability assessments using relevant tools.
• Coordinate threat simulations to identify weaknesses in security controls.
• Review findings and approve testing plans and reports.

Conocimientos

Penetration testing

Threat modelling

Team leadership

Vulnerability assessment

Educación

CompTIA Security+

OSCP

CREST CPT/CT

Descripción del empleo

One of our federal govt clients is seeking to engage Lead Penetration Tester for Canberra, Brisbane, Melbourne and Adelaide

Please note candidate must have NV1 security clearance

• Extension term details -24 months
• Location of work - Canberra, Brisbane, Melbourne and Adelaide
• Working arrangements -Hybrid

Job details

Penetration Testers analyse IT systems to determine configuration weaknesses and faults that would impact on security and business then produce reports detailing the findings and recommendations for improved network security.

Cyber Security Penetration Testers conduct complex penetration testing and highly sensitive vulnerability assessment activities. They simulate different types of cyber security attacks and develop penetration testing methodologies.

Key duties and responsibilities

• oversee the execution of test cases using in-depth technical analysis of risks and typical vulnerabilities
• lead cyber penetration testing and vulnerability assessments using relevant tools and methods against a variety of technologies
• conduct and lead complex threat simulation activities to identify weaknesses and/or opportunities in technical security controls
• oversee the catalogue of test findings and potential measures
• oversee and approve security testing plans
• provide highly technical subject matter expertise to system owners and stakeholders to improve system security posture
• conduct highly complex analysis and research to identify improvements to cyber threat tools, techniques and procedures
• manage and coordinate a variety of risk analysis and assessments on cyber security matters
• perform web application and mobile penetration testing against complex enterprise platforms using a variety of technologies
• conduct infrastructure penetration testing against enterprise grade systems
• collaborate with system owners to develop test scope and preparation for testing ensuring remediation has been completed effectively
• review reports, briefs and documentation and communicate technical findings and recommendations
• transfer highly technical skills and knowledge to other staff through continuous coaching and on-the-job training to support succession planning
• lead and support the operations of a team, including setting priorities and managing performance, resources and workflows
• exercise delegations in line with legislation and guidelines.

Knowledge / Qualifications

Desirable qualifications but not mandatory:

CompTIA Security +, CompTIA PenTest +, Certified Ethical Hacker, CREST Registered Penetration Tester, Offensive Security Certified(OSCE3), GIAC Penetration Tester

• 1.Forensics: Level 4 (CIISEC)
• Undertakes basic forensic tasks (e.g. first responder) without supervision. Has some experience of more complex tasks (e.g. using specialist tools to recover, preserve and analyse data) under supervision.
• 2.Penetration Testing and conducting Simulated Attack Exercises: Level 5 (CIISEC)
• Uses commercial and bespoke tools to conduct complex penetration testing without close supervision and/or leads teams undertaking complex penetration tests. Undertakes penetration exploits as part of a simulated attack exercise under direction. Appropriate and relevant certifications include CHECK Team Leader, CREST Certified Tester (Infrastructure or Web Applications) or equivalents.