Lead Penetration Tester – Cyber Security (NV1)

Data#3; Canberra; Hybride; AUD 140 000 - 190 000; Plein temps

Résumé du poste

Data#3 is seeking a Lead Penetration Tester to conduct complex penetration testing, vulnerability assessments and simulated cyber attacks across enterprise environments. This senior role combines hands‑on testing with technical leadership, risk analysis and stakeholder engagement.

You’ll lead testing activities, oversee test plans and findings, mentor staff and coordinate remediation across Windows, Linux, web, and mobile platforms. Hybrid Canberra/Brisbane/Melbourne/Adelaide.

Qualifications

• Extensive experience in web application penetration testing across enterprise platforms.
• Experience leading complex penetration tests with minimal supervision.
• Strong ability to plan, perform, report and communicate testing results to technical and non‑technical audiences.
• Proven capability to mentor team members and manage testing workflows.

Responsabilités

• Lead complex penetration testing and vulnerability assessments across enterprise systems and applications.
• Conduct web application and mobile penetration testing using a range of tools, techniques and methodologies.
• Perform infrastructure penetration testing across Windows and Linux environments.
• Plan, oversee and approve security testing activities, including test cases, scope and preparation.
• Conduct simulated attack exercises and threat simulations to identify weaknesses in technical security controls.
• Analyse vulnerabilities, assess risks and oversee the documentation of findings and remediation recommendations.
• Work with system owners and stakeholders to agree testing scope and validate remediation activities.
• Provide specialist technical advice to improve system security and strengthen security controls.
• Research and recommend improvements to cyber security testing tools, techniques and procedures.
• Review technical reports, briefs and documentation, communicating findings clearly to technical and non-technical audiences.
• Coach and mentor team members, transferring technical knowledge and supporting capability development.
• Lead team operations, including prioritising work, coordinating resources and managing workflows.

Connaissances

Web app penetration testing

Infrastructure penetration testing

Lead complex testing engagements

Simulated attack exercises

Technical reporting & risk assessment

Stakeholder communication

Test plans & remediation oversight

Coaching and knowledge transfer

Description du poste

Lead Penetration Tester – Cyber Security (NV1)

Location: Canberra, ACT | Brisbane, QLD | Melbourne, VIC | Adelaide, SA
Engagement: 12-month contract, with extension potential of up to 24 months
Working Arrangements: Hybrid, subject to operational requirements
Security Clearance: Active NV1 security clearance is mandatory

About the Role

We’re seeking an experienced Lead Penetration Tester to conduct complex penetration testing, vulnerability assessments and simulated cyber attacks across enterprise environments.

This is a senior technical role combining hands‑on penetration testing expertise with technical leadership, risk analysis and stakeholder engagement. You’ll assess web applications, mobile platforms and enterprise infrastructure to identify security weaknesses, validate technical controls and provide practical recommendations to strengthen security posture.

You’ll also lead testing activities, oversee test plans and findings, provide specialist security advice, and mentor other team members.

Key Responsibilities

• Lead complex penetration testing and vulnerability assessments across enterprise systems and applications.

• Conduct web application and mobile penetration testing using a range of tools, techniques and methodologies.

• Perform infrastructure penetration testing across Windows and Linux environments.

• Plan, oversee and approve security testing activities, including test cases, scope and preparation.

• Conduct simulated attack exercises and threat simulations to identify weaknesses in technical security controls.

• Analyse vulnerabilities, assess risks and oversee the documentation of findings and remediation recommendations.

• Work with system owners and stakeholders to agree testing scope and validate remediation activities.

• Provide specialist technical advice to improve system security and strengthen security controls.

• Research and recommend improvements to cyber security testing tools, techniques and procedures.

• Review technical reports, briefs and documentation, communicating findings clearly to technical and non-technical audiences.

• Coach and mentor team members, transferring technical knowledge and supporting capability development.

• Lead team operations, including prioritising work, coordinating resources and managing workflows.

About You

You’re an experienced penetration tester with strong hands‑on technical capability and the confidence to lead complex security testing engagements. You can identify and exploit vulnerabilities within authorised testing environments, assess the associated risks and translate technical findings into actionable recommendations.

You’re also comfortable working with senior stakeholders, coordinating testing activities and supporting the development of other cyber security professionals.

Essential Technical Skills & Experience

• Considerable experience conducting web application penetration testing across complex enterprise platforms built using a variety of technologies.

• Strong experience conducting infrastructure penetration testing across enterprise‑grade Windows and Linux environments.

• Demonstrated ability to lead complex penetration tests with minimal supervision, using commercial and bespoke testing tools.

• Experience with simulated attack exercises, vulnerability analysis and the assessment of technical security controls.

• Strong technical reporting, risk assessment and stakeholder communication skills.

• Experience overseeing test plans, findings, remediation activities and testing workflows.

• Ability to provide technical guidance, coaching and knowledge transfer to other team members.

Forensics Capability

Experience undertaking forensic activities, including initial response tasks and supporting more complex investigations using specialist tools to recover, preserve and analyse data.

Desirable Certifications

• CompTIA Security+ or PenTest+

• Certified Ethical Hacker (CEH)

• CREST Registered Penetration Tester

• Offensive Security Certified Expert-level certifications (OSCE3)

• GIAC Penetration Tester (GPEN)

• Equivalent recognised penetration testing certifications

Why Apply?

• Take a lead role in complex enterprise cyber security testing.

• Work across web applications, mobile platforms and enterprise infrastructure.

• Apply your technical expertise to improve security controls and reduce organisational risk.

• Share your knowledge and help build penetration testing capability within a specialist team.

• Secure a 12-month contract with potential extensions of up to 24 months.

Security Requirement

Candidates must have an NV1 security clearance.

Working Arrangements

The role is based in Canberra, Brisbane, Melbourne or Adelaide. Candidates should be prepared to work onsite for the first six weeks, with hybrid arrangements considered thereafter, subject to operational requirements. Hybrid arrangements generally require a minimum of three days onsite per week.