Penetration Tester

Bridge IT Engineering; Canberra, Brisbane, Melbourne, Adelaide; Hybrid; AUD 150,000 - 190,000; Full time

Job summary

Bridge IT Engineering is seeking experienced Lead Penetration Testers to support a major Federal Government department in delivering complex penetration testing, vulnerability assessments and cyber security assurance activities. The role leads testing across web, mobile and infrastructure, designs testing plans, mentors other security professionals and communicates findings to stakeholders.

Hybrid work in Canberra, Brisbane, Melbourne or Adelaide is offered with a 12-month contract plus

Qualifications

• Extensive hands-on experience in complex penetration testing.
• Experience testing enterprise web and mobile applications and infrastructure.
• Expertise across Windows and Linux platforms.
• Proficiency with commercial and bespoke penetration testing tools.
• Experience leading engagements and reviewing security assessments.
• Knowledge of digital forensics and evidence handling.
• Strong reporting and stakeholder communication skills.
• Experience mentoring technical teams.

Responsibilities

• Lead complex penetration testing and vulnerability assessments.
• Test web applications, mobile apps and infrastructure environments.
• Design and execute simulated cyber attacks to identify weaknesses.
• Develop and approve testing plans, methodologies and reports.
• Identify security risks and provide remediation recommendations.
• Utilise testing tools to assess controls and findings.
• Collaborate with owners to define scope and validate remediation.
• Communicate findings to stakeholders and provide guidance.

Skills

Penetration testing

Web app testing

Mobile app testing

Infrastructure testing

Windows/Linux

Security reporting

Team leadership

Education

CREST Certified Tester

CompTIA Security+

CEH

OSCE3

Tools

Penetration testing tools

Job description

Location: Canberra, Brisbane, Melbourne or Adelaide

Contract: 12 months + potential extensions up to 24 months

Start Date: February 2027

Security Clearance: NV1 required

Working Arrangements: Hybrid

Bridge IT Engineering is seeking experienced Lead Penetration Testers to support a major Federal Government department in delivering complex penetration testing, vulnerability assessments and cyber security assurance activities.

About the Role

Our Federal Government client is seeking experienced Lead Penetration Testers to identify, assess and mitigate security vulnerabilities across complex enterprise ICT environments. The successful candidates will lead sophisticated penetration testing activities across web applications, mobile applications and infrastructure platforms, conducting simulated cyber attacks and providing technical recommendations to strengthen security controls. Working closely with technical teams and key stakeholders, you will play an important role in improving the organisation's overall cyber security posture.

Key Responsibilities

• Lead complex penetration testing and vulnerability assessments across enterprise ICT environments.
• Conduct web application, mobile application and infrastructure penetration testing.
• Design and execute simulated cyber attacks to identify security weaknesses and vulnerabilities.
• Develop, review and approve penetration testing plans, methodologies and technical reports.
• Identify security risks and provide practical remediation recommendations.
• Utilise commercial and bespoke penetration testing tools to assess security controls.
• Collaborate with system owners and technical teams to define testing scope and validate remediation activities.
• Communicate technical findings and security recommendations to stakeholders.
• Provide technical leadership, mentoring and knowledge transfer to other security professionals.
• Support team operations, priorities and delivery of security testing activities.

Skills and Experience

To be successful in this role, you will demonstrate:

• Extensive hands‑on experience conducting complex penetration testing and simulated attack exercises.
• Strong experience testing enterprise web applications, mobile applications and infrastructure environments.
• Expertise in penetration testing across Windows and Linux platforms.
• Proficiency with commercial and bespoke penetration testing tools and vulnerability assessment techniques.
• Experience leading penetration testing engagements and reviewing technical security assessments.
• Knowledge of digital forensics, including evidence preservation, recovery and analysis.
• Strong technical reporting, stakeholder communication and remediation advisory skills.
• Experience mentoring technical teams and providing cyber security leadership.

Highly regarded certifications include:

• CREST Certified Tester / Registered Penetration Tester
• CompTIA Security+ or PenTest+
• Certified Ethical Hacker (CEH)
• Offensive Security Certified Expert (OSCE3)

Previous experience within Federal Government or complex enterprise ICT environments will be highly regarded.

Bridge IT Engineering – Connecting employers and candidates with consideration, professionalism and care since 1999.