Principal Cyber Security Pen Tester, Strategy, Delivery and Cybersecurity

Victorian Government - Department of Health; Melbourne; On-site; AUD 140,000 - 170,000; Full time

Job summary

The Victorian Government - Department of Health is seeking a Principal Cyber Security - Penetration Testing to lead penetration testing and vulnerability assessments across diverse cloud environments. You will produce risk reports with actionable recommendations and help implement risk treatments and security controls, coordinating remediation with multiple teams.

Ideal candidates bring proven pen-testing experience, cloud security knowledge (Azure/AWS), and certifications such as CEH or OSCP.

Qualifications

• A tertiary qualification relevant to ICT, Information Security, or similar would be highly advantageous.
• Proven experience in penetration testing, ethical hacking, and vulnerability assessments across complex and cloud-based environments.
• Demonstrated experience in cyber security risk analysis and reporting, including development of mitigation recommendations.
• Proficiency with industry-standard penetration testing and vulnerability assessment tools.
• Strong understanding of cloud security (Microsoft Azure, AWS), secure coding practices, and system hardening techniques.
• Familiarity with regulatory standards and frameworks such as ISO 27001, NIST, OWASP Top 10, ASD ISM, and the Essential Eight.
• Experience coordinating remediation efforts and advising on technical risk treatments across multiple teams or departments.
• Certifications CEH - Certified Ethical Hacker and/or OSCP - Offensive Security Certified Professional.

Responsibilities

• Conduct penetration testing and vulnerability assessments in collaboration with the Manager, Enterprise Cybersecurity Operations.
• Lead the development and ongoing management of penetration testing and vulnerability assessment activities.
• Produce cyber security risk reports outlining findings and actionable recommendations from both pen-testing and vulnerability assessment.
• Assist in the implementation of technical risk treatments across systems and environments.
• Regularly review and assess the effectiveness of penetration testing tools and services.
• Develop new vulnerability assessment schedules as required.
• Support the implementation of security controls and coordinate their deployment across cloud-based platforms and environments.
• Perform information security risk assessments, conduct gap analyses, and coordinate security remediation across the department.

Skills

Penetration testing

Ethical hacking

Vulnerability assessments

Cloud security

Microsoft Azure

AWS

Secure coding practices

System hardening

Regulatory standards knowledge

Nessus

Nmap

Burp Suite

Metasploit

Kali Linux

Education

Bachelor's degree in ICT or Information Security

Tools

Burp Suite

Metasploit

Nessus

Nmap

Kali Linux

Job description

About the role:The Principal Cyber Security - Penetration Testing role will be responsible for conducting penetration testing and vulnerability assessments, in collaboration with the Manager, Enterprise Cybersecurity Operations. The role will lead the development and management of penetration testing and vulnerability assessment activities, including the production of cyber security risk reports with findings and recommendations.The role will assist in the implementation of technical risk treatments, regularly review penetration testing tools and services, and update vulnerability configurations. This includes developing new vulnerability assessment schedules as required. The role will also support the implementation of security controls and coordinate their deployment across a range of predominantly cloud-based platforms and environments.Additionally, the role will be responsible for performing information security risk assessments, conducting gap analyses, and coordinating security remediation activities across the department.About us:At the Victorian Department of Health we want a future where Victorians are the healthiest people in the world. A Victoria where our children and people thrive, our workplaces are productive and safe, and our communities are more connected.We see it as our job to support Victorians to stay healthy and safe. And to deliver a world-class healthcare system that ensures every single Victorian can access safe, quality care that leads to better health outcomes for all.About you:Conduct penetration testing and vulnerability assessments in collaboration with the Manager, Enterprise Cybersecurity Operations.Lead the development and ongoing management of penetration testing and vulnerability assessment activities.Produce cyber security risk reports outlining findings and actionable recommendations from both pen-testing and vulnerability assessment.Assist in the implementation of technical risk treatments across systems and environments.Regularly review and assess the effectiveness of penetration testing tools and services.Qualification(s):A tertiary qualification relevant to ICT, Information Security, or similar would be highly advantageous.Specialist Expertise:Proven experience in penetration testing, ethical hacking, and vulnerability assessments across complex and cloud-based environments.Demonstrated experience in cyber security risk analysis and reporting, including development of mitigation recommendations.Proficiency with industry-standard penetration testing and vulnerability assessment tools (e.g., Burp Suite, Metasploit, Nessus, Nmap, Kali Linux).Strong understanding of cloud security (Microsoft Azure, AWS), secure coding practices, and system hardening techniques.Familiarity with regulatory standards and frameworks such as ISO 27001, NIST, OWASP Top 10, ASD ISM (Information Security Manual), and the Essential Eight.Experience coordinating remediation efforts and advising on technical risk treatments across multiple teams or departments.Additionally completed following certificationsCEH - Certified Ethical Hacker and/orOSCP - Offensive Security Certified ProfessionalWhat we offer:The opportunity to perform meaningful work, making direct contributions toward enabling Victorians to be the healthiest people in the world.A wide range of growth and development opportunities within the department and wider Victorian Public Service.A strong commitment to work-life balance, including a diverse array of flexible working arrangements.How to apply:Applications should include a resume and a cover letter. Click the `Apply' button to view further information about the role including key contact details and the advertisement closing date.We are committed to developing and supporting a workforce that is well equipped and highly motivated to provide responsive and quality services to all Victorians. We continue to build an inclusive workplace that embraces diversity of backgrounds and differences to realise the potential of our employees for innovation and delivering services aimed at enhancing the lives of all Victorians. All roles can be worked flexibly and we encourage applications from Aboriginal people, people with disability, LGBTIQ+ and people from culturally diverse backgrounds. Please contact us if you require any adjustments to participate in the recruitment process at [e-mail]. For more information on our commitment to inclusion and diversity see inclusion and diversity at the Department of Health.If you have any queries in relation to participation in recruitment processes at Health, or experience any issues in applying, please feel free to email [e-mail]. Please note that unsolicited applications from third parties cannot be accepted. If you have questions regarding the role, please message the contact person listed on the advertisement directly.Preferred applicants may be required to complete a police check and other pre-employment checks. Information provided will be treated in line with our Privacy Policy.