Penetration Test Manager

Decipher Bureau; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

Decipher Bureau in Sydney, Australia, seeks a Penetration Testing Manager to own and evolve its security testing programme across a complex technology environment. You will guide scoping, delivery, reporting and remediation, while engaging with senior stakeholders and external providers.

The role spans applications, infrastructure and cloud, with opportunities to lead Red Team and Purple Team exercises and to explore AI-enabled testing approaches.

Qualifications

• Experience in managing end-to-end penetration testing engagements.
• Strong understanding of penetration testing methodologies and risks.
• Excellent consulting and stakeholder engagement skills.

Responsibilities

• Own the end-to-end penetration testing programme from scoping to remediation.
• Coordinate external providers and internal teams for delivery.
• Lead Red Team and Purple Team activities across the organisation.
• Review findings, assess risks and drive remediation outcomes.
• Present testing results to technical teams and senior stakeholders.

Job description

I'm partnering with a major Australian organisation looking for a Penetration Testing Manager to take ownership of its established security testing programme across a complex, business-critical technology environment.

This opportunity would suit someone with a strong understanding of penetration testing who enjoys the consulting, stakeholder engagement and delivery side of cyber security.

Why consider this opportunity?

• Own the end-to-end penetration testing programme, from initial scoping through to reporting and remediation.
• Gain exposure to a broad technology environment spanning applications, infrastructure and cloud.
• Coordinate Red Team and Purple Team exercises alongside specialist security providers.
• Explore emerging AI-enabled and automated penetration testing capabilities.
• Enjoy genuine ownership and senior stakeholder exposure in a role combining technical security and consulting.

Key responsibilities

• Manage the full penetration testing lifecycle, including scoping, planning, delivery, reporting and remediation.
• Coordinate external testing providers and internal technology teams to ensure successful delivery.
• Support Red Team and Purple Team activities across the organisation.
• Review technical findings, assess security risks and drive remediation outcomes.
• Present testing results and programme updates to technical teams and senior business stakeholders.

What we're looking for

• Background in penetration testing, offensive security, cyber consulting or security assurance.
• Experience managing end-to-end penetration testing engagements and external providers.
• Strong technical understanding of testing methodologies, vulnerabilities and associated risks.
• Excellent consulting and stakeholder engagement skills, with the ability to communicate technical findings to business audiences.
• A proactive, organised approach to managing multiple engagements and driving outcomes.

Nice to have

• Previous hands-on penetration testing experience.
• Exposure to Red Team or Purple Team exercises.
• Experience in financial services, critical infrastructure or complex enterprise environments.
• Knowledge of automated or AI-enabled security testing.
• Relevant certifications such as OSCP, GPEN, CISSP or CISM.

Interested?

This is a great opportunity for an experienced security consultant or penetration testing specialist looking to step into a role with greater ownership, influence and exposure to emerging security technologies.