Lead Penetration Testers

Compas PTY; Canberra; On-site; AUD 120,000 - 180,000; Full time

Job summary

Compas PTY in Canberra, ACT, is seeking a Lead Penetration Tester to oversee complex penetration testing across secure ICT applications and gateway infrastructure for an Australian Government environment. This onsite role requires analyzing threats, designing tests, and delivering actionable recommendations on security controls.

12-month contract with possible extensions, must hold current TSPV clearance; close collaboration with project teams and stakeholders to ensure resilient systems.

Qualifications

• Experience conducting complex penetration tests without close supervision.
• Ability to lead teams undertaking complex testing activities.
• Experience conducting penetration exploits as part of simulated attack exercises.
• Relevant certifications such as CHECK Team Leader, CREST Certified Tester or equivalent.

Responsibilities

• Conduct complex penetration testing across ICT applications and gateway infrastructure.
• Use commercial and bespoke penetration testing techniques, frameworks and tools.
• Develop plans and procedures for penetration tests and simulated attack exercises.
• Report findings and recommend technical solutions for identified vulnerabilities.

Skills

Penetration testing

Team leadership

Simulated attacks

Security certifications

Job description

Job Title: Lead Penetration Tester | Simulated Attack Exercises
Lead complex penetration testing across secure ICT applications and gateway infrastructure, using commercial and bespoke tools to identify vulnerabilities and recommend technical solutions. Two Canberra-based opportunities are available in an onsite Australian Government environment.

Location: Canberra, ACT
Work Arrangement: Onsite – arrangements are subject to operational need and the assigned work area
Contract Duration: 12 months, with possible 2 x 12-month extensions
Security Clearance Requirement: TSPV
Closing Date: 10.00am, 25 September 2026

Essential Tasks:

• Conduct complex penetration testing across ICT applications and gateway infrastructure.
• Use commercial and bespoke penetration testing techniques, frameworks and tools.
• Develop plans and procedures for penetration tests and simulated attack exercises.
• Report findings and recommend technical solutions for identified vulnerabilities.

Key Criteria:

• Demonstrated experience conducting complex penetration tests without close supervision.
• Capability to lead teams undertaking complex penetration testing activities.
• Experience conducting penetration exploits as part of simulated attack exercises.
• Relevant certification such as CHECK Team Leader, CREST Certified Tester or equivalent.

YOUR APPLICATION WILL BE TREATED WITH THE STRICTEST CONFIDENCE:

Due to the nature of this environment, candidates must hold a current TSPV clearance.