Penetration Tester

Calleo; City of Melbourne; Hybrid; AUD 120,000 - 150,000; Full time

Benefits offered by this job

Hybrid working arrangement

12 month contract with extension options

Opportunity to influence security posture

Job summary

Calleo is seeking an experienced Lead Penetration Tester to join their high-performing cyber security team in Melbourne. In this role, you will lead complex penetration testing and vulnerability assessments, providing expert technical advice and mentoring. The position offers a hybrid working arrangement with the opportunity to support major Federal agencies and influence security posture.

The ideal candidate must have strong experience in penetration testing, relevant certifications, and the ability to collaborate effectively with stakeholders.

Qualifications

• Proven experience leading complex penetration testing engagements.
• Deep expertise across web, mobile and infrastructure testing.
• Strong understanding of security vulnerabilities and controls.

Responsibilities

• Lead and deliver penetration testing and vulnerability assessments.
• Conduct advanced threat simulations to identify weaknesses.
• Develop and execute security testing plans and methodologies.

Skills

Penetration Testing

Vulnerability Assessment

Threat Simulation

Technical Leadership

Risk Management

Education

CREST, OSCP/OSCE, CEH, GIAC, or CompTIA Security+/PenTest+

Job description

An exciting opportunity is available for an experienced Lead Penetration Tester to join a high-performing cyber security team within a large federal government environment.

In this role, you will lead the delivery of complex penetration testing and vulnerability assessment activities across enterprise systems, helping to identify security weaknesses and strengthen cyber resilience. You will also provide expert technical advice, influence security practices, and mentor team members.

The successful person will be a highly skilled cyber security professional with a strong background in penetration testing within complex environments.

Key Responsibilities

• Lead and deliver penetration testing and vulnerability assessments across applications, infrastructure and enterprise platforms
• Conduct advanced threat simulations to identify weaknesses in security controls
• Develop and execute security testing plans and methodologies
• Provide technical leadership and oversight of testing activities and findings
• Analyse and report on vulnerabilities, including clear remediation recommendations
• Collaborate with system owners to define scope and ensure effective remediation
• Drive continuous improvement of tools, techniques and procedures
• Mentor and coach team members, supporting capability uplift and knowledge transfer
• Contribute to security standards, risk assessments and governance activities

Key Experience

• Proven experience leading complex penetration testing engagements and simulated attack exercises
• Deep expertise across web, mobile and infrastructure testing
• Strong understanding of security vulnerabilities, controls and risk management
• Experience providing technical advice to senior stakeholders
• Ability to lead teams, set priorities and manage competing workloads
• CREST, OSCP/OSCE, CEH, GIAC, or CompTIA Security+/PenTest+ (or equivalent)
• AGSVA NV1 clearance required (Baseline may be considered)

What's on Offer

• Hybrid working arrangement with 2-3 days in the office
• 12 month contract + 2x 12-month extension options
• Opportunity to support the cyber uplift for a major Federal agency
• Influence enterprise-level security posture and resilience

Due to the nature of this role, this job is open to Australian Citizens only.

Calleo is an equal opportunity employer and we encourage applications from all people including Aboriginal and Torres Strait Islander peoples.