Penetration Tester

BLACKROC Recruitment; Sydney; Hybrid; AUD 120,000 - 160,000; Full time

Job summary

BLACKROC Recruitment seeks an experienced Lead Penetration Tester for a Federal Government organisation on an initial 12-month contract with potential extension. The role focuses on hands-on security testing across web, mobile, APIs, cloud, and infrastructure, with Red Team and adversary emulation work to strengthen the overall security posture.

The ideal candidate brings strong offensive security background, stakeholder collaboration skills, and a proactive approach to identifying and

Qualifications

• Strong hands-on experience in penetration testing and offensive security.
• Experience testing across web/mobile apps, APIs, networks, and cloud environments.
• Practical experience with Red Team operations and adversary emulation.
• Solid understanding of network protocols, vulnerabilities and exploitation techniques.
• Scripting or programming with Python, C or Golang.

Responsibilities

• Conducting advanced penetration testing across web and mobile applications, APIs, cloud environments and IT infrastructure.
• Performing Red Team operations and adversary emulation exercises to identify security weaknesses.
• Identifying and validating vulnerabilities, recommending remediation strategies and working with teams to address risks.
• Providing security guidance throughout the design and development lifecycle.
• Collaborating with Cyber Security teams, technical specialists and business stakeholders.
• Providing technical guidance and recommendations to senior stakeholders.
• Developing technical documentation and supporting ongoing improvements to testing practices.

Skills

Penetration testing

Ethical hacking

Red Team operations

Adversary emulation

Python

C

Golang

AWS

Kubernetes

Security testing

Tools

AWS

Kubernetes

Job description

We're currently looking for an experienced Lead Penetration Tester to join a large Federal Government organisation on an initial 12-month contract, with the option to extend for a further 12 months.

This is a great opportunity for someone who enjoys being hands-on technically, has a strong background in offensive security and is confident working with a range of stakeholders to identify and address complex security vulnerabilities.

You’ll be joining an established technology and security environment, working across a range of platforms, applications and infrastructure to help strengthen the organisation’s overall security posture.

We're currently looking for an experienced Lead Penetration Tester to join a large Federal Government organisation on an initial 12-month contract, with the option to extend for a further 12 months.

This is a great opportunity for someone who enjoys being hands-on technically, has a strong background in offensive security and is confident working with a range of stakeholders to identify and address complex security vulnerabilities.

You’ll be joining an established technology and security environment, working across a range of platforms, applications and infrastructure to help strengthen the organisation’s overall security posture.

What you’ll be doing

• Conducting advanced penetration testing across web and mobile applications, APIs, cloud environments and IT infrastructure.
• Performing Red Team operations and adversary emulation exercises to identify potential security weaknesses.
• Identifying and validating vulnerabilities, recommending practical remediation strategies and working with teams to address security risks.
• Providing security advice throughout the design and development lifecycle.
• Collaborating with Cyber Security teams, technical specialists and business stakeholders.
• Providing technical guidance and recommendations to senior stakeholders.
• Developing technical documentation and supporting ongoing improvements to security testing practices.

What we’re looking for

• Strong hands-on experience in penetration testing, ethical hacking and offensive security.
• Experience testing across web applications, APIs, mobile applications, networks and cloud environments.
• Practical experience with Red Team operations and adversary emulation.
• Strong understanding of network protocols, vulnerabilities and exploitation techniques.
• Scripting or programming experience with Python, C, Golang or similar.
• Strong analytical and problem-solving skills, with the ability to communicate technical findings clearly.
• Certifications such as OSCP, OSCE, GWAPT, GXPN or GMOB would be highly regarded.
• Experience with AWS, Kubernetes and automated security testing would also be beneficial.

The opportunity

• Contract: Initial 12 months + potential extension
• Location: Multiple locations across Australia – Brisbane, Sydney, Melbourne, Canberra
• Working arrangements: Hybrid, minimum 3 days per week in the office
• Eligibility: Australian citizenship is essential, along with the ability to obtain an NV1 security clearance.