Lead Penetration Testers | Multiple Contract Opportunities

Master2Manage Pty Limited, Australia; Canberra; Hybrid; AUD 165,000 - 179,000; Full time

Job summary

Master2Manage Pty Limited in Canberra, Melbourne, Brisbane, or Adelaide is seeking a Lead Security Tester for a 12-month contract. You will lead complex penetration testing and vulnerability assessments across enterprise ICT environments, conducting advanced web/mobile applications testing and simulated cyberattacks.

NV1 clearance is required before commencement (current NV1 preferred). The role starts February 2027 with initial onsite work and potential hybrid arrangements (typically 3 days

Qualifications

• Extensive hands-on experience in enterprise penetration testing, vulnerability assessment and offensive security.
• Demonstrated capability in Penetration Testing and Simulated Attack Exercises (CIISEC Level 5).
• Demonstrated capability in Digital Forensics (CIISEC Level 4).
• Strong experience testing enterprise web applications and Windows/Linux infrastructure.

Responsibilities

• Lead complex penetration testing and vulnerability assessments across enterprise ICT environments.
• Conduct advanced web application, mobile application and infrastructure penetration testing.
• Plan and execute simulated cyberattacks to identify exploitable vulnerabilities and weaknesses in security controls.
• Develop testing methodologies, testing plans and scopes, and oversee technical execution.
• Undertake forensic analysis, technical security research and risk assessments.
• Assess remediation effectiveness and provide practical recommendations to strengthen security.
• Deliver comprehensive technical reports and communicate findings to technical and non-technical stakeholders.
• Provide technical leadership, mentoring and oversight of security testing activities.

Skills

Penetration testing

Vulnerability assessment

Offensive security

Digital forensics

Leadership / mentoring

Job description

Master2Manage Pty Limited, Australia - Canberra ACT

Note: These positions are strictly for Australian Citizens holding NV1 or able to get NV1 before commencement of the role. Any applications from overseas for non-Australian Citizens will NOT be entertained.

Company Description

Master2Manage Pty Limited is an Australian-owned management and technology consulting company supporting government agencies, regulated industries, and private organisations to strengthen cyber resilience and deliver secure ICT outcomes. The firm combines strategic advisory with hands-on delivery across ICT labour hire, cybersecurity governance and assurance, ICT project and program delivery, and corporate and ICT training. Its integrated capability spans enterprise architecture, business analysis, governance and risk management, compliance and audit readiness, AI engineering, and solution implementation. Consultants have delivered cybersecurity and digital transformation initiatives for Commonwealth and state government, defence, healthcare, critical infrastructure, and commercial clients. Master2Manage is an approved supplier under the BuyICT Digital Marketplace 2.0 and BuyNSW ICT Services Scheme, providing professional consulting services and ICT labour hire.

Position Details

• Locations: Canberra, Melbourne, Brisbane or Adelaide


• Contract Duration: 12 months


• Indicative Rate: $120-$130 per hour (including superannuation)


• Expected Commencement: February 2027


• Security Clearance: NV1 required before commencement (current NV1 preferred)


• Work Arrangement: Initial 6 weeks onsite, followed by potential hybrid arrangements (typically 3 days onsite per week)


• Seniority: Lead / EL1 equivalent

Key Responsibilities

• Lead complex penetration testing and vulnerability assessments across enterprise ICT environments.


• Conduct advanced web application, mobile application and infrastructure penetration testing.


• Plan and execute simulated cyberattacks to identify exploitable vulnerabilities and weaknesses in security controls.


• Develop testing methodologies, testing plans and scopes, and oversee technical execution.


• Undertake forensic analysis, technical security research and risk assessments.


• Assess remediation effectiveness and provide practical recommendations to strengthen security.


• Deliver comprehensive technical reports and communicate findings to technical and non-technical stakeholders.


• Provide technical leadership, mentoring and oversight of security testing activities.

Essential Skills and Experience

• Extensive hands-on experience in enterprise penetration testing, vulnerability assessment and offensive security.


• Demonstrated capability in Penetration Testing and Simulated Attack Exercises (CIISEC Level 5).


• Demonstrated capability in Digital Forensics (CIISEC Level 4).


• Strong experience testing enterprise web applications and Windows/Linux infrastructure.


• Proven ability to lead complex technical assessments, manage competing priorities and engage stakeholders effectively.

Desirable Certifications

CREST, CHECK Team Leader, OSCE3, GIAC GPEN, CEH, CompTIA PenTest+ or equivalent industry certifications.