Lead Penetration Tester
Hands-on offensive security lead role running penetration tests, red team and adversary emulation engagements across web, mobile, APIs, cloud (incl. AWS), Kubernetes, network and wireless environments for critical systems. 12-month contract plus extension; Australian citizenship and NV1 clearance mandatory; hybrid, Australia-wide.
- Compensation
- Not disclosed
- Location
- Sydney NSW
- Work setup
- Hybrid
- Seniority
- Lead
- Employment
- Contract
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Australian Citizenship is mandatory
- Ability to obtain and maintain NV1 security clearance
- Extensive penetration testing and offensive security experience
- Experience assessing web applications
- Experience assessing mobile applications
- Experience assessing APIs
- Experience assessing cloud platforms
- Experience assessing Kubernetes environments
- Experience assessing networks and wireless infrastructure
- Strong understanding of network protocols and security architecture
- Demonstrated Red Team and adversary emulation experience
- Experience developing tools, scripts or exploits (Python, Golang, C, other scripting languages)
- Strong stakeholder engagement and communication skills
- Available to work in a hybrid environment
- Located in ACT, NSW, VIC, QLD, SA, WA or TAS
Nice to have
- Certifications: OSCP, OSCE, GXPN, GWAPT, GMOB, or CREST
- Automated security testing and security tooling
- AWS security and cloud penetration testing
- Security documentation and technical reporting
- DevSecOps and cloud-native security environments
Full description
Lead Penetration Tester | EL1 Equivalent
**12-Month Contract + 12-Month Extension | NV1 Eligible | Hybrid | Australia-Wide Locations
Are you an experienced Penetration Tester who thrives on identifying vulnerabilities before adversaries do?
We are seeking a Lead Penetration Tester to join a high-performing cyber security team responsible for protecting critical systems and services. This is a hands-on offensive security role suited to a senior cyber professional with deep penetration testing expertise across modern enterprise environments.
Working within a collaborative security function, you will conduct advanced penetration testing, red team activities and adversary emulation exercises while providing strategic security advice to technical and executive stakeholders.
Key Responsibilities
- Conduct penetration testing across web applications, mobile applications, APIs, cloud platforms and infrastructure environments.
- Perform network, wireless and infrastructure security assessments.
- Lead offensive security engagements and red team operations.
- Identify, validate and report security vulnerabilities and recommend remediation strategies.
- Develop proof-of-concept exploits and security testing tools.
- Collaborate with engineering, security and product teams to embed security into design and delivery processes.
- Support security monitoring, compliance and risk management initiatives.
- Provide expert technical advice to senior stakeholders.
- Produce high-quality technical reports, findings and recommendations.
- Contribute to continuous improvement of security testing methodologies and tooling.
Essential Experience
- Extensive penetration testing and offensive security experience.
- Experience assessing:
- Web Applications
- Mobile Applications
- APIs
- Cloud Platforms
- Kubernetes Environments
- Networks & Wireless Infrastructure
- Strong understanding of network protocols and security architecture.
- Demonstrated experience conducting Red Team and adversary emulation activities.
- Ability to analyse complex security problems and develop innovative solutions.
- Experience developing tools, scripts or exploits using:
- Python
- Golang
- C
- Other scripting languages
- Strong stakeholder engagement and communication skills.
Highly Regarded Certifications One or more of the following certifications will be highly advantageous: