Security Penetration Testing Lead

JS Careers Pty; Sydney; On-site; AUD 180,000 - 210,000; Full time

Job summary

JS Careers Pty partners with a leading Sydney-based organisation to appoint a Cyber Security Testing Lead responsible for overseeing security testing activities, pen testing, and vendor management. The role combines hands-on testing with strategic leadership and capability-building across security testing.

You will drive internal testing capability, coordinate with Cyber, Infrastructure and Security Operations teams, and communicate findings to stakeholders to prioritise remediation.

Qualifications

• OSCP certification is mandatory.
• 5+ years' cybersecurity experience, including application security or red-team.
• Ability to review testing methodologies and challenge external service providers.

Responsibilities

• Own and oversee security testing activities including penetration testing, vulnerability assessments, application security and adversary simulations.
• Manage external testing providers, validating scopes, challenging methodologies and ensuring the quality of findings.
• Remain technically hands-on, reproducing vulnerabilities, retesting findings and validating remediation.
• Act as a technical SME, supporting Cyber, Infrastructure and Security Operations teams through security assessments and adversary simulation exercises.
• Guide and oversee internal testers, providing technical direction and ensuring testing standards are maintained.
• Build internal capability, playing a key role in transitioning more security testing in-house over the next 12 months, helping establish and develop an internal testing team.
• Review and communicate security findings, working with stakeholders to prioritise and resolve vulnerabilities.

Skills

Penetration testing

Offensive security

Technical security testing

Leadership potential

Stakeholder communication

Job description

Penetration Testing | Offensive Security | OSCP Required | Cyber Assurance

We are partnering with a leading Sydney-based organisation seeking a technically strong Cyber Security Testing Lead to oversee security testing activities. Sitting within the cyber assurance controls function you will be the go-to testing specialist and help increase internal pen testing capability.

This is an excellent opportunity for a Senior Penetration Tester, Offensive Security Consultant or Security Testing Lead looking to take greater ownership of security testing strategy, vendor relationships and technical capability development.

The Opportunity

• Own and oversee security testing activities, including penetration testing, vulnerability assessments, application security and adversary simulations.
• Manage external testing providers, validating scopes, challenging methodologies and ensuring the quality of findings.
• Remain technically hands-on, reproducing vulnerabilities, retesting findings and validating remediation.
• Act as a technical SME, supporting Cyber, Infrastructure and Security Operations teams through security assessments and adversary simulation exercises.
• Guide and oversee internal testers, providing technical direction and ensuring testing standards are maintained.
• Build internal capability, play a key role in transitioning more security testing in-house over the next 12 months, helping establish and develop an internal testing team.
• Review and communicate security findings, working with stakeholders to prioritise and resolve vulnerabilities.

About You

• OSCP certification is mandatory.
• Strong practical experience in penetration testing, offensive security or technical security testing.
• Approximately 5+ years' cybersecurity experience, ideally including application security, vulnerability assessments or red-team exercises.
• Confident reviewing testing methodologies, validating findings and challenging external service providers.
• Excellent communication skills, with the ability to engage technical and non-technical stakeholders.
• Leadership potential and an interest in developing people, processes and internal security testing capability.

Why Consider This Role?

• Opportunity to take ownership of a security testing function and influence its future direction.
• Build an internal testing capability rather than simply deliver individual penetration testing engagements.
• Balance hands-on technical work with stakeholder engagement, oversight and technical leadership.
• Work in a collaborative environment with opportunities to develop broader cybersecurity expertise.

If you're an OSCP-certified penetration tester or offensive security professional looking to broaden your responsibilities and help shape an internal security testing capability, we'd welcome a conversation.