Lead Penetration Tester Just posted

NW People; Canberra; Hybrid; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Hybrid work arrangements

Job summary

NW People is seeking experienced Lead Penetration Testers to support a large Federal Government agency, with NV1 clearance. You will lead complex security testing, identify vulnerabilities, and provide actionable recommendations to strengthen security.

This role combines hands-on delivery with team leadership, stakeholder engagement and mentoring. Positions available in Canberra, Melbourne, Brisbane or Adelaide, with an initial onsite period and hybrid arrangements thereafter.

Qualifications

• NV1 clearance mandatory for the role.
• Extensive hands-on penetration testing across complex systems.
• Experience delivering tests independently and leading testing teams.
• Forensics experience and basic incident response skills.

Responsibilities

• Lead penetration testing and vulnerability assessments across web, mobile, and enterprise infrastructure.
• Conduct complex threat simulations to test security controls.
• Develop, review and approve testing plans, scopes and methodologies.
• Analyse findings and communicate business risks with remediation priorities.
• Coordinate with system owners to validate remediation and testing.
• Review technical reports and provide security advice to stakeholders.
• Coach testers and coordinate team priorities and workloads.

Skills

Penetration testing

Vulnerability assessments

Threat simulations

Team leadership

Security reporting

Mentoring staff

Education

NV1 clearance (mandatory)

CREST/ CHECK / GIAC / CEH / CompTIA PenTest+ certifications

Job description

We are seeking experienced Lead Penetration Testers with NV1 Clearance to support a large Federal Government agency. You will lead complex security testing and simulated attacks across enterprise applications and infrastructure, identifying vulnerabilities and providing practical recommendations to strengthen security.

This role combines hands-on technical delivery with team leadership, stakeholder engagement and mentoring.

• Long Term- initial 12-month- Federal Government Contract
• Location: Open to Canberra, Melbourne, Brisbane or Adelaide; hybrid arrangements considered
• Clearance: NV1 MANDATORY

Key responsibilities

• Lead penetration testing and vulnerability assessments across web applications, mobile applications and enterprise infrastructure.
• Conduct complex threat simulations to assess the effectiveness of security controls.
• Develop, review and approve testing plans, scopes and methodologies.
• Analyse findings, communicate business risks and recommend remediation priorities.
• Work with system owners to coordinate testing and validate remediation.
• Review technical reports and provide specialist security advice to stakeholders.
• Coach testers and coordinate team priorities, resources and workflows.

Skills and experience

• Extensive hands-on penetration testing experience across complex enterprise web applications and Windows/Linux infrastructure.
• Experience delivering complex penetration tests independently and leading testing teams.
• Practical experience conducting simulated attack exercises using commercial and bespoke tools.
• Forensics experience, including independently performing basic first-response tasks and supporting more complex evidence recovery, preservation and analysis.
• Strong technical reporting skills and the ability to explain findings to technical and business stakeholders.
• Experience mentoring staff and improving testing tools, techniques and methodologies.

Relevant qualifications such as CREST, CHECK Team Leader, OSCE3, GIAC Penetration Tester, CEH or CompTIA PenTest+ are highly desirable.

Location and working arrangements

Positions are available in Canberra, Melbourne, Brisbane and Adelaide. The first six weeks will be onsite. Hybrid arrangements may then be considered, generally requiring at least three days per week in the office. Candidates must live within reasonable travelling distance of their nominated office.

Security clearance

An NV1 security clearance is required before commencing the contract. Candidates with a current NV1 or higher clearance are encouraged to apply.