Lead Penetration Tester - National Security & IRAP

Excelium Pty Ltd; Canberra; On-site; Full time

Job description

At Excelium, cybersecurity and national security are more than just our focus- it is at the heart of what we do. We are not traditional consultants; we are modern, adaptable, and effective professionals from diverse backgrounds, united by a shared commitment to excellence. Our high-performing teams are at the forefront of shaping regulatory frameworks, developing innovative solutions, and delivering exceptional services to government agencies, private enterprises, and critical infrastructure providers across Australia.

As our team of specialists continues to grow, our mission remains clear: to counter increasingly complex cyber and national security threats, support organisational maturity uplift, and strengthen resilience nationwide. We achieve this by delivering solutions that are fit for purpose, practical, and sustainable for the organisations we partner with. Our values-building strong relationships, achieving outstanding results, delivering value for money, valuing our people, upholding a strong reputation, and demonstrating honesty and integrity-underpin everything we do and guide how we work with our clients and each other.

As a Penetration Tester, you will play a pivotal role within the Security Operations team, leading advanced penetration testing engagements across diverse environments. You will work closely with internal and external stakeholders to ensure systems, applications, cloud platforms, and devices are thoroughly assessed against evolving cyber threats.

Key Responsibilities

• Lead, design, and coordinate comprehensive penetration testing engagements, including scoping, planning, and execution of tests across complex IT environments.
• Conduct advanced security assessments that leverage real-world attack simulations, uncovering high-risk vulnerabilities and potential exploit paths.
• Build and maintain strong partnerships with stakeholders, providing actionable advice and translating complex technical findings into clear, executive-level insights.
• Develop, maintain, and refine threat models to prioritise vulnerabilities and guide remediation efforts effectively.
• Innovate and enhance internal methodologies, creating new tools, frameworks, and processes to improve testing efficiency and effectiveness.
• Mentor and support team members, fostering a culture of collaboration, knowledge sharing, and continuous improvement.
• Contribute to broader cybersecurity initiatives, including vulnerability management, threat hunting, and incident response activities as required.

Requirements, Experience & Skills

• NV1 AGSVA Security Clearance.
• Be based in or have the ability to work from Canberra, ACT.
• Minimum five (5) years’ experience in field of expertise.
• Formal penetration testing training or recognised certifications.
• Demonstrated experience with or knowledge of PSPF, ISM and Essential Eight.
• Proven ability to lead complex technical discussions and influence decision-making among technical and non-technical stakeholders.
• Exceptional communication skills, including the ability to convey complex security concepts to senior leadership and diverse audiences.
• Strong problem-solving and analytical skills, with a proactive approach to identifying risks and recommending mitigation strategies.

Why Join The Excelium Team?

JoiningExceliummeans contributing to meaningful national-level work while continuing to grow your career. You will benefit from:

• Competitive remuneration aligned to capability
• Day-one mentoring from experienced IRAP practitioners
• A collaborative, no-ego culture that supports growth
• Exposure to high-impact government and critical infrastructure projects
• Flexible working arrangements and supported professional development

Our Commitment to Diversity

Excelium is an equal opportunity employer and is committed to creating an inclusive workplace that values and celebrates diversity. We strongly encourage applications from Aboriginal and Torres Strait Islander people, veterans, individuals with disabilities, and people of all cultural backgrounds.

How to Apply

If you are ready to build or continue a strong career in Cybersecurity and Assurance, we would love to hear from you.

Please submit your resume along with a cover letter outlining your experience and explaining why you believe you’re the ideal candidate for this position.

For a confidential discussion, please email your questions to [e-mail]- let’s talk!