Lead Penetration Tester- NV1

XPT Software Australia Pty Ltd; Melbourne, Canberra, Brisbane, Adelaide; On-site; AUD 120,000 - 170,000; Full time

Job summary

XPT Software Australia Pty Ltd in Melbourne is seeking an experienced Security Penetration Tester to analyze IT systems, perform complex penetration testing and threat simulations, and deliver actionable security improvements. You will lead testing activities, collaborate with system owners, and guide other staff in best practices for protecting enterprise platforms.

The role requires hands-on testing across web, mobile and infrastructure, plus the ability to coordinate test plans, review

Qualifications

• Experience leading penetration testing projects and teams.
• Ability to perform threat simulations and vulnerability assessments.
• Strong analytical skills for identifying security gaps and recommending mitigations.
• Certifications in recognised security testing frameworks are preferred.

Responsibilities

• Oversee execution of test cases with in-depth risk analysis.
• Lead penetration tests across diverse technologies.
• Coordinate threat simulations to identify weaknesses in security controls.
• Manage and review test findings and remediation plans.
• Provide technical guidance to system owners and stakeholders.
• Update test methodologies and tooling to improve security posture.
• Mentor staff and transfer knowledge through training.
• Lead and coordinate a penetration testing team and workflows.
• Ensure compliance with legislation and guidelines.

Skills

Penetration testing

Threat simulation

Leadership

Security testing

Education

CHECK Team Leader

CREST Certified Tester

Job description

XPT Software Australia Pty Ltd | Contract

Melbourne, Canberra, Brisbane, Adelaide, Australia | Posted on 10/22/2026

• City Melbourne, Canberra, Brisbane, Adelaide
• State/Province Victoria
• Country Australia

About Us

AboutXPT

• XPT SoftwareAustralia PTY Ltd, incorporated in 2016, is a Software Services company
• XPT works with topclients across Australia in Banking, Insurance, Telecom,Retail, Energy, Mining and Manufacturingdomains.
• We have 120+technocrats in Australia working at our clientlocations.
• XPT SoftwareAustralia is part of group companies which has globalpresence across India & Europe.
• We have served100+ clients globally, fulfilling their onsite-offshoreneeds.

Job Description

Security clearance: Must be able to obtain Negative Vetting Level 1

Job details

Penetration Testers analyse IT systems to determine configuration weaknesses and faults that would impact on security and business then produce reports detailing the findings and recommendations for improved network security.

Cyber Security Penetration Testers conduct complex penetration testing and highly sensitive vulnerability assessment activities. They simulate different types of cyber security attacks and develop penetration testing methodologies.

Key duties and responsibilities

1. oversee the execution of test cases using in-depth technical analysis of risks and typical vulnerabilities

2. lead cyber penetration testing and vulnerability assessments using relevant tools and methods against a variety of technologies

3. conduct and lead complex threat simulation activities to identify weaknesses and/or opportunities in technical security controls

4. oversee the catalogue of test findings and potential measures

5. oversee and approve security testing plans

6. provide highly technical subject matter expertise to system owners and stakeholders to improve system security posture

7. conduct highly complex analysis and research to identify improvements to cyber threat tools, techniques and procedures

8. manage and coordinate a variety of risk analysis and assessments on cyber security matters

9. perform web application and mobile penetration testing against complex enterprise platforms using a variety of technologies

10. conduct infrastructure penetration testing against enterprise grade systems

11. collaborate with system owners to develop test scope and preparation for testing ensuring remediation has been completed effectively

12. review reports, briefs and documentation and communicate technical findings and recommendations

13. transfer highly technical skills and knowledge to other staff through continuous coaching and on-the-job training to support succession planning

14. lead and support the operations of a team, including setting priorities and managing performance, resources and workflows

15. exercise delegations in line with legislation and guidelines.

Criteria:

Undertakes basic forensic tasks (e.g. first responder) without supervision. Has some experience of more complex tasks (e.g. using specialist tools to recover, preserve and analyse data) under supervision.

2. Penetration Testing and conducting Simulated Attack Exercises: Level 5 (CIISEC)

Uses commercial and bespoke tools to conduct complex penetration testing without close supervision and/or leads teams undertaking complex penetration tests. Undertakes penetration exploits as part of a simulated attack exercise under direction. Appropriate and relevant certifications include CHECK Team Leader, CREST Certified Tester (Infrastructure or Web Applications) or equivalents.