Lead Penetration Tester -Canberra, Brisbane, Melbourne and Adelaide

IT Alliance; Canberra; Hybride; AUD 140 000 - 190 000; Plein temps

Résumé du poste

IT Alliance seeks a Lead Penetration Tester to work across Canberra, Brisbane, Melbourne, and Adelaide with hybrid arrangements. The role requires leading penetration testing, vulnerability assessments, and threat simulations on enterprise platforms, and coordinating test scope with system owners to ensure remediation is effective.

The position emphasizes coaching staff, delivering high‑quality security findings, and aligning with security guidelines. An NV1 clearance is required for the role.

Qualifications

• Experience leading complex penetration testing engagements.
• Ability to analyse security controls and report findings.
• Familiarity with web, mobile, and infrastructure pen testing across enterprise environments.

Responsabilités

• Oversee the execution of test cases with in-depth risk analysis.
• Lead cyber penetration testing and vulnerability assessments using relevant tools and methods.
• Conduct threat simulations to identify weaknesses in security controls.
• Oversee and approve security testing plans and reports.
• Provide technical SME guidance to system owners and stakeholders to improve security posture.
• Coach staff and transfer knowledge through training and mentoring.
• Lead and manage a testing team, setting priorities and coordinating resources.

Connaissances

Penetration testing

Vulnerability assessment

Threat simulation

Team leadership

Description du poste

Lead Penetration Tester -Canberra, Brisbane, Melbourne and Adelaide

One of our federal govt clients is seeking to engage Lead Penetration Tester for Canberra, Brisbane, Melbourne and Adelaide

Please note candidate must have NV1 security clearance

• Extension term details -24 months
• Location of work - Canberra, Brisbane, Melbourne and Adelaide
• Working arrangements -Hybrid

One of our federal govt clients is seeking to engage Lead Penetration Tester for Canberra, Brisbane, Melbourne and Adelaide

Please note candidate must have NV1 security clearance

• Initial contract duration- 12 months
• Extension term details -24 months
• Experience level - EL1 equivalent
• Location of work - Canberra, Brisbane, Melbourne and Adelaide
• Working arrangements -Hybrid

Job details

Penetration Testers analyse IT systems to determine configuration weaknesses and faults that would impact on security and business then produce reports detailing the findings and recommendations for improved network security.

Cyber Security Penetration Testers conduct complex penetration testing and highly sensitive vulnerability assessment activities. They simulate different types of cyber security attacks and develop penetration testing methodologies.

Key duties and responsibilities

• oversee the execution of test cases using in-depth technical analysis of risks and typical vulnerabilities
• lead cyber penetration testing and vulnerability assessments using relevant tools and methods against a variety of technologies
• conduct and lead complex threat simulation activities to identify weaknesses and/or opportunities in technical security controls
• oversee the catalogue of test findings and potential measures
• oversee and approve security testing plans
• provide highly technical subject matter expertise to system owners and stakeholders to improve system security posture
• conduct highly complex analysis and research to identify improvements to cyber threat tools, techniques and procedures
• manage and coordinate a variety of risk analysis and assessments on cyber security matters
• perform web application and mobile penetration testing against complex enterprise platforms using a variety of technologies
• conduct infrastructure penetration testing against enterprise grade systems
• collaborate with system owners to develop test scope and preparation for testing ensuring remediation has been completed effectively
• review reports, briefs and documentation and communicate technical findings and recommendations
• transfer highly technical skills and knowledge to other staff through continuous coaching and on-the-job training to support succession planning
• lead and support the operations of a team, including setting priorities and managing performance, resources and workflows
• exercise delegations in line with legislation and guidelines.

Knowledge / Qualifications

Desirable qualifications but not mandatory

CompTIA Security +, CompTIA PenTest +, Certified Ethical Hacker, CREST Registered Penetration Tester, Offensive Security Certified(OSCE3), GIAC Penetration Tester

Essential criteria

• 1.Forensics: Level 4 (CIISEC)
• Undertakes basic forensic tasks (e.g. first responder) without supervision. Has some experience of more complex tasks (e.g. using specialist tools to recover, preserve and analyse data) under supervision.
• 2.Penetration Testing and conducting Simulated Attack Exercises: Level 5 (CIISEC)
• Uses commercial and bespoke tools to conduct complex penetration testing without close supervision and/or leads teams undertaking complex penetration tests. Undertakes penetration exploits as part of a simulated attack exercise under direction. Appropriate and relevant certifications include CHECK Team Leader, CREST Certified Tester (Infrastructure or Web Applications) or equivalents.