Lead Penetration Tester ( Nv1 Clearance )

Xpt Software Australia Pty Ltd; Canberra; On-site; AUD 110,000 - 165,000; Full time

Job summary

Xpt Software Australia Pty Ltd is seeking an experienced Penetration Tester to assess security, perform complex vulnerability work, and produce actionable reports for senior stakeholders. The role involves leading testing activities across web, mobile, and infrastructure, advancing methodologies and risk-based security improvements.

You will oversee test planning, coordinate across teams, and coach staff to strengthen cyber capabilities while aligning with regulatory guidelines and

Qualifications

• Penetration testers with IT security knowledge and reporting skills.
• Experience conducting web/mobile and infrastructure testing.
• Ability to coordinate risk analyses and assessments.

Responsibilities

• oversee the execution of test cases using in-depth technical analysis of risks and typical vulnerabilities
• lead cyber penetration testing and vulnerability assessments using relevant tools and methods against a variety of technologies
• conduct and lead complex threat simulation activities to identify weaknesses and/or opportunities in technical security controls
• oversee the catalogue of test findings and potential measures
• oversee and approve security testing plans
• provide highly technical subject matter expertise to system owners and stakeholders to improve system security posture
• conduct highly complex analysis and research to identify improvements to cyber threat tools, techniques and procedures
• manage and coordinate a variety of risk analysis and assessments on cyber security matters
• perform web application and mobile penetration testing against complex enterprise platforms using a variety of technologies
• conduct infrastructure penetration testing against enterprise grade systems
• collaborate with system owners to develop test scope and preparation for testing ensuring remediation has been completed effectively
• review reports, briefs and documentation and communicate technical findings and recommendations
• transfer highly technical skills and knowledge to other staff through continuous coaching and on-the-job training to support succession planning
• lead and support the operations of a team, including setting priorities and managing performance, resources and workflows
• exercise delegations in line with legislation and guidelines.

Job description

Job Description

Penetration Testers analyse IT systems to determine configuration weaknesses and faults that would impact on security and business then produce reports detailing the findings and recommendations for improved network security.

Cyber Security Penetration Testers conduct complex penetration testing and highly sensitive vulnerability assessment activities. They simulate different types of cyber security attacks and develop penetration testing methodologies.

Key duties and responsibilities

1. oversee the execution of test cases using in-depth technical analysis of risks and typical vulnerabilities
   
2. lead cyber penetration testing and vulnerability assessments using relevant tools and methods against a variety of technologies
   
3. conduct and lead complex threat simulation activities to identify weaknesses and/or opportunities in technical security controls
   
4. oversee the catalogue of test findings and potential measures
   
5. oversee and approve security testing plans
   
6. provide highly technical subject matter expertise to system owners and stakeholders to improve system security posture
   
7. conduct highly complex analysis and research to identify improvements to cyber threat tools, techniques and procedures
   
8. manage and coordinate a variety of risk analysis and assessments on cyber security matters
   
9. perform web application and mobile penetration testing against complex enterprise platforms using a variety of technologies
   
10. conduct infrastructure penetration testing against enterprise grade systems
    
11. collaborate with system owners to develop test scope and preparation for testing ensuring remediation has been completed effectively
    
12. review reports, briefs and documentation and communicate technical findings and recommendations
    
13. transfer highly technical skills and knowledge to other staff through continuous coaching and on-the-job training to support succession planning
    
14. lead and support the operations of a team, including setting priorities and managing performance, resources and workflows
    
15. exercise delegations in line with legislation and guidelines.
    

Requirements

Job details Penetration Testers analyse IT systems to determine configuration weaknesses and faults that would impact on security and business then produce reports detailing the findings and recommendations for improved network security. Cyber Security Penetration Testers conduct complex penetration testing and highly sensitive vulnerability assessment activities. They simulate different types of cyber security attacks and develop penetration testing methodologies. Key duties and responsibilities 1. oversee the execution of test cases using in-depth technical analysis of risks and typical vulnerabilities 2. lead cyber penetration testing and vulnerability assessments using relevant tools and methods against a variety of technologies 3. conduct and lead complex threat simulation activities to identify weaknesses and/or opportunities in technical security controls 4. oversee the catalogue of test findings and potential measures 5. oversee and approve security testing plans 6. provide highly technical subject matter expertise to system owners and stakeholders to improve system security posture 7. conduct highly complex analysis and research to identify improvements to cyber threat tools, techniques and procedures 8. manage and coordinate a variety of risk analysis and assessments on cyber security matters 9. perform web application and mobile penetration testing against complex enterprise platforms using a variety of technologies 10. conduct infrastructure penetration testing against enterprise grade systems 11. collaborate with system owners to develop test scope and preparation for testing ensuring remediation has been completed effectively 12. review reports, briefs and documentation and communicate technical findings and recommendations 13. transfer highly technical skills and knowledge to other staff through continuous coaching and on-the-job training to support succession planning 14. lead and support the operations of a team, including setting priorities and managing performance, resources and workflows 15. exercise delegations in line with legislation and guidelines.