Penetration Tester

Profectus; Canberra; On-site; AUD 150,000 - 190,000; Full time

Job summary

Profectus is seeking experienced Lead Penetration Testers to support security testing services for Australian Government clients. These senior roles lead complex testing activity in highly secure, tightly governed environments, collaborating with security, engineering and project teams.

You will conduct penetration testing across applications, infrastructure and gateway environments, lead testing teams, and provide remediation guidance while mentoring less experienced testers.

Qualifications

• Extensive experience conducting penetration tests across applications, infrastructure and gateway environments.
• Ability to plan, lead and deliver complex testing engagements with minimal supervision.
• Knowledge of testing methodologies, tools and reporting standards.
• Experience identifying and documenting vulnerabilities across networks, OS and web apps.
• Ability to translate findings into remediation guidance for technical and non-technical audiences.
• Experience working within secure, highly regulated environments.
• Strong reporting skills with accuracy and detail.
• Relevant certifications such as CREST Certified Tester or CHECK Team Leader.
• Experience contributing to simulated attack exercises.
• Experience with scripting and automation to support testing.
• Prior experience delivering testing services to Australian Government clients.

Responsibilities

• Conduct penetration testing across ICT applications, infrastructure and gateway environments.
• Lead and coordinate testing teams on complex engagements.
• Apply a range of penetration testing techniques, methodologies and tools.
• Develop test plans, scoping documents and procedures for engagements.
• Record approaches, techniques and results to support reporting.
• Produce clear technical reports detailing findings, risk ratings and recommended solutions.
• Recommend technical remediation for identified vulnerabilities and support follow up validation.
• Participate in simulated attack exercises and related security assessment activity.
• Provide technical guidance and mentoring to less experienced testers.
• Engage with system owners and technical stakeholders to explain findings and actions.
• Maintain testing documentation, tooling and standards to a consistent quality.

Skills

Penetration testing

Team leadership

Scripting & automation

Technical reporting

Tools

Penetration testing tools

Job description

Profectus is seeking experienced Lead Penetration Testers to support the delivery of security testing services within an agency of the Australian Government. The work involves assessing ICT applications, infrastructure and gateway environments to identify configuration weaknesses, vulnerabilities and faults that affect security, then reporting findings and recommending remediation. These are senior roles leading complex testing activity in highly secure, tightly governed environments, working alongside security, engineering and project teams.

Key Responsibilities

• Conduct penetration testing across ICT applications, infrastructure and gateway environments
• Lead and coordinate teams undertaking complex penetration testing activity
• Apply a range of penetration testing techniques, methodologies and commercial and bespoke tools
• Develop test plans, scoping documents and procedures for individual engagements
• Record approaches, techniques and results to support accurate and repeatable reporting
• Produce clear technical reports detailing findings, risk ratings and recommended solutions
• Recommend technical remediation for identified vulnerabilities and support follow up validation
• Participate in simulated attack exercises and related security assessment activity
• Provide technical guidance and mentoring to less experienced testers
• Engage with system owners and technical stakeholders to explain findings and agreed actions
• Maintain testing documentation, tooling and standards to a consistent quality

Required Experience

• Extensive experience conducting penetration tests against applications, infrastructure and gateway environments
• Proven ability to plan, lead and deliver complex testing engagements without close supervision
• Strong working knowledge of penetration testing methodologies, tools and reporting standards
• Experience identifying, exploiting and documenting vulnerabilities across networks, operating systems and web applications
• Ability to translate technical findings into practical remediation advice for technical and non technical audiences
• Experience working within secure, highly regulated environments
• Strong written reporting skills with attention to accuracy and detail
• Relevant certifications such as CREST Certified Tester (Infrastructure or Web Applications), CHECK Team Leader or equivalent
• Experience contributing to simulated attack exercises
• Experience with scripting and automation to support testing activity
• Prior experience delivering security testing services to Australian Government clients

Security Clearance Requirements

• must be an Australian Citizen
• must hold a current Positive Vetting (TSPV) security clearance

Working Arrangements

• onsite

Why Profectus

Profectus partners with Australian Government agencies to deliver trusted ICT capability across complex delivery programs. We take a long term, relationship driven approach, supporting our people across the full lifecycle of their engagement while contributing to outcomes of national importance.