Lead Penetration Tester - Federal Cybersecurity (Hybrid)

IT Alliance; Canberra; Hybrid; AUD 150,000 - 210,000; Full time

Job summary

IT Alliance is seeking a Lead Penetration Tester for a long-term contract to oversee and execute advanced penetration tests across multiple government platforms. You will lead testing engagements, coordinate with system owners, and drive remediation of critical vulnerabilities.

Ideal candidates have hands-on expertise in test planning, risk analysis, and delivering technical guidance to stakeholders, with a track record of improving security postures in enterprise environments.

Qualifications

• Experience leading penetration testing engagements across complex environments.
• Strong ability to analyse risks and identify vulnerabilities.
• Ability to coordinate testing with stakeholders and system owners.

Responsibilities

• Oversee execution of test cases with in-depth analysis of risks and vulnerabilities.
• Lead cyber penetration testing and vulnerability assessments across technologies.
• Conduct and lead threat simulation activities to identify weaknesses in security controls.
• Oversee the catalog of test findings and remediation measures.
• Oversee and approve security testing plans.
• Provide technical SME guidance to system owners and stakeholders to improve security posture.
• Coordinate risk analyses and assessments on cyber security matters.
• Collaborate with system owners to develop test scope and remediation paths.
• Review reports and communicate findings and recommendations.
• Transfer technical skills to staff through coaching and training.
• Lead and manage a team, setting priorities and managing resources.

Skills

Penetration testing

Threat modeling

Team leadership

Vulnerability assessment

Tools

Metasploit

Burp Suite

Nessus

Job description

IT Alliance is seeking a Lead Penetration Tester for a long-term contract to oversee and execute advanced penetration tests across multiple government platforms. You will lead testing engagements, coordinate with system owners, and drive remediation of critical vulnerabilities.

Ideal candidates have hands-on expertise in test planning, risk analysis, and delivering technical guidance to stakeholders, with a track record of improving security postures in enterprise environments.