Security Testing Lead Specialist

The HR Ally; City of Melbourne; On-site; AUD 140,000 - 190,000; Full time

Job summary

The HR Ally is seeking a Security Testing Lead Specialist to join our secure development practice in Sydney/Melbourne for a permanent, full-time role. You will lead high‑complexity security assessments across customer systems, including advanced penetration testing, vulnerability assessments, and secure code reviews with a focus on real‑world exploitability.

You will provide technical leadership as a security testing SME, translate findings into business risk insights, and help shape testing

Responsibilities

• Lead high-complexity security assessments across customer systems.
• Perform advanced penetration testing, vulnerability assessments, and code reviews.
• Provide technical leadership as a security testing SME.
• Translate findings into clear business risk insights.
• Drive security testing strategy, standards, and continuous improvement.
• Collaborate with cyber security teams to uplift capabilities.
• Mentor junior team members and share domain knowledge.
• Balance risk with business timelines and objectives.
• Fulfil HSE responsibilities per policy.

Job description

Role:

Security Testing Lead Specialist

Location:

Sydney/Melbourne

Job type:

Permanent

Eligibility:

Australian PRs and Citizens

Key Accountabilities Include:

• Lead and deliver high-complexity, high-assurance security assessments across customer's systems, including advanced penetration testing, vulnerability assessments, and source code security reviews, focusing on real-world exploitability and attack path development.
• Provide authoritative technical leadership as a subject matter expert in security testing and secure development, acting as the primary escalation point for complex vulnerabilities, assessments, and adversary emulation activities.
• Evaluate the effectiveness of systems in protecting organisational data and maintaining intended functionality, and provide strategic recommendations to improve security posture and resilience.
• Identify and validate critical vulnerabilities, exploit paths, and attack vectors, including analysing scan outputs and manual testing results to assess risk and impact accurately.
• Translate technical findings into clear, actionable business risk insights, supporting informed decision making and prioritised remediation.
• Drive the evolution of security testing strategy, methodologies, and standards, ensuring alignment with industry best practices and continuous improvement across the function.
• Collaborate with the Security Testing - Senior Lead and broader cyber security teams to shape capability development, resourcing, and operational direction.
• Assess existing security controls and practices against expected standards and recommend improvements to address gaps and uplift security maturity.
• Ensure delivery of high-quality security assessment reports, clearly articulating risks, impacts, and recommended mitigations.
• Provide mentorship and technical guidance to uplift capability across both senior and junior team members.
• Apply a pragmatic, risk-based approach to all activities, balancing security requirements with business objectives, timelines, and operational constraints.
• Fulfil Health, Safety, and Environment (HSE) responsibilities in accordance with organisational policies and regulatory requirements.

Additional information:

• Provide technical leadership across the domain, including performing and leading complex assessments across multiple technical domains, and responding to escalated incidents and engagements.
• Provide input into customer's Penetration Testing, Vulnerability Assessment and Secure Code processes, methodologies, standards, and corresponding roadmaps and enhancement plans.
• Develop and deliver training for junior team members and the broader customer community to uplift security capability.
• Promote shift-left practices to enable the delivery of secure, high-quality code at speed.
• Provide guidance on application security architecture and secure design considerations.
• Develop scripts and contribute to automation initiatives to improve the efficiency and effectiveness of security testing activities.
• Refine and define engagement processes, secure code artefacts, security criteria, and use cases.
• Collaborate with third parties, including vendors and newly acquired entities, to assess and uplift their security and development practices.
• Conduct quality assurance reviews of deliverables produced within the Secure Code team to ensure high technical standards.
• Operate effectively in environments with ambiguous or conflicting requirements, consistently delivering high-quality outcomes aligned with Cyber Security expectations.
• Translate technical vulnerabilities into business risk for stakeholders in a timely manner, leveraging insights from the broader Cyber Security function.
• Apply a pragmatic approach to security testing, balancing business objectives, standards alignment, cost, time, and risk considerations.