Principal Pen Tester & Cloud Security Leader

Victorian Government - Department of Health; Melbourne; On-site; AUD 140,000 - 170,000; Full time

Job summary

The Victorian Government - Department of Health is seeking a Principal Cyber Security - Penetration Testing to lead penetration testing and vulnerability assessments across diverse cloud environments. You will produce risk reports with actionable recommendations and help implement risk treatments and security controls, coordinating remediation with multiple teams.

Ideal candidates bring proven pen-testing experience, cloud security knowledge (Azure/AWS), and certifications such as CEH or OSCP.

Qualifications

• A tertiary qualification relevant to ICT, Information Security, or similar would be highly advantageous.
• Proven experience in penetration testing, ethical hacking, and vulnerability assessments across complex and cloud-based environments.
• Demonstrated experience in cyber security risk analysis and reporting, including development of mitigation recommendations.
• Proficiency with industry-standard penetration testing and vulnerability assessment tools.
• Strong understanding of cloud security (Microsoft Azure, AWS), secure coding practices, and system hardening techniques.
• Familiarity with regulatory standards and frameworks such as ISO 27001, NIST, OWASP Top 10, ASD ISM, and the Essential Eight.
• Experience coordinating remediation efforts and advising on technical risk treatments across multiple teams or departments.
• Certifications CEH - Certified Ethical Hacker and/or OSCP - Offensive Security Certified Professional.

Responsibilities

• Conduct penetration testing and vulnerability assessments in collaboration with the Manager, Enterprise Cybersecurity Operations.
• Lead the development and ongoing management of penetration testing and vulnerability assessment activities.
• Produce cyber security risk reports outlining findings and actionable recommendations from both pen-testing and vulnerability assessment.
• Assist in the implementation of technical risk treatments across systems and environments.
• Regularly review and assess the effectiveness of penetration testing tools and services.
• Develop new vulnerability assessment schedules as required.
• Support the implementation of security controls and coordinate their deployment across cloud-based platforms and environments.
• Perform information security risk assessments, conduct gap analyses, and coordinate security remediation across the department.

Skills

Penetration testing

Ethical hacking

Vulnerability assessments

Cloud security

Microsoft Azure

AWS

Secure coding practices

System hardening

Regulatory standards knowledge

Nessus

Nmap

Burp Suite

Metasploit

Kali Linux

Education

Bachelor's degree in ICT or Information Security

Tools

Burp Suite

Metasploit

Nessus

Nmap

Kali Linux

Job description

The Victorian Government - Department of Health is seeking a Principal Cyber Security - Penetration Testing to lead penetration testing and vulnerability assessments across diverse cloud environments. You will produce risk reports with actionable recommendations and help implement risk treatments and security controls, coordinating remediation with multiple teams.

Ideal candidates bring proven pen-testing experience, cloud security knowledge (Azure/AWS), and certifications such as CEH or OSCP.