Penetration Tester

Bridge It Engineering; Melbourne; Hybrid; AUD 140,000 - 210,000; Full time

Job summary

Bridge IT Engineering is seeking experienced Lead Penetration Testers to support a major Federal Government department. The role involves complex penetration testing, vulnerability assessments, and cyber security assurance activities in hybrid work arrangements across Canberra, Melbourne, and other locations.

You will lead engagements across web, mobile, and infrastructure, develop testing plans, review technical reports, and mentor security professionals while communicating findings to

Qualifications

• Lead penetration testing engagements across enterprise ICT environments.
• Experience testing web and mobile apps and infrastructure.
• Proficiency with Windows and Linux platforms.
• Knowledge of testing tools and vulnerability assessment techniques.
• Experience mentoring security professionals.

Responsibilities

• Lead complex penetration testing and vulnerability assessments.
• Test web, mobile, and infrastructure environments.
• Design and execute simulated cyber attacks to identify weaknesses.
• Develop and approve testing plans, methodologies, and reports.
• Provide remediation recommendations and collaborate with stakeholders.
• Mentor security professionals and share knowledge.

Skills

Penetration testing

Web/mobile/infrastructure testing

Windows

Linux

Leadership

Communication

Tools

Penetration testing tools

Forensics tools

Job description

Location: Canberra, Brisbane, Melbourne or Adelaide

Contract: 12 months + potential extensions up to 24 months

Start Date: February 2027

Security Clearance: NV1 required

Working Arrangements: Hybrid

Bridge IT Engineering is seeking experienced Lead Penetration Testers to support a major Federal Government department in delivering complex penetration testing, vulnerability assessments and cyber security assurance activities.

About the Role

Our Federal Government client is seeking experienced Lead Penetration Testers to identify, assess and mitigate security vulnerabilities across complex enterprise ICT environments. The successful candidates will lead sophisticated penetration testing activities across web applications, mobile applications and infrastructure platforms, conducting simulated cyber attacks and providing technical recommendations to strengthen security controls. Working closely with technical teams and key stakeholders, you will play an important role in improving the organisation's overall cyber security posture.

Key Responsibilities

• Lead complex penetration testing and vulnerability assessments across enterprise ICT environments.
• Conduct web application, mobile application and infrastructure penetration testing.
• Design and execute simulated cyber attacks to identify security weaknesses and vulnerabilities.
• Develop, review and approve penetration testing plans, methodologies and technical reports.
• Identify security risks and provide practical remediation recommendations.
• Utilise commercial and bespoke penetration testing tools to assess security controls.
• Collaborate with system owners and technical teams to define testing scope and validate remediation activities.
• Communicate technical findings and security recommendations to stakeholders.
• Provide technical leadership, mentoring and knowledge transfer to other security professionals.
• Support team operations, priorities and delivery of security testing activities.

Skills and Experience

To be successful in this role, you will demonstrate:

• Extensive hands‑on experience conducting complex penetration testing and simulated attack exercises.
• Strong experience testing enterprise web applications, mobile applications and infrastructure environments.
• Expertise in penetration testing across Windows and Linux platforms.
• Proficiency with commercial and bespoke penetration testing tools and vulnerability assessment techniques.
• Experience leading penetration testing engagements and reviewing technical security assessments.
• Knowledge of digital forensics, including evidence preservation, recovery and analysis.
• Strong technical reporting, stakeholder communication and remediation advisory skills.
• Experience mentoring technical teams and providing cyber security leadership.

Highly regarded certifications include:

• CREST Certified Tester / Registered Penetration Tester
• CompTIA Security+ or PenTest+
• Certified Ethical Hacker (CEH)
• Offensive Security Certified Expert (OSCE3)

Previous experience within Federal Government or complex enterprise ICT environments will be highly regarded.