Penetration Tester

About This Role

This role involves leading complex penetration testing, vulnerability assessments, and cyber security assurance activities for a major Federal Government department. The successful candidate will identify, assess, and mitigate security vulnerabilities across complex enterprise ICT environments, conducting simulated cyber attacks and providing technical recommendations to strengthen security controls. Working closely with technical teams and key stakeholders, you will play an important role in improving the organisation's overall cyber security posture.

Responsibilities

• Lead complex penetration testing and vulnerability assessments across enterprise ICT environments
• Conduct web application, mobile application, and infrastructure penetration testing
• Design and execute simulated cyber attacks to identify security weaknesses and vulnerabilities
• Develop, review, and approve penetration testing plans, methodologies, and technical reports
• Identify security risks and provide practical remediation recommendations
• Utilise commercial and bespoke penetration testing tools to assess security controls
• Collaborate with system owners and technical teams to define testing scope and validate remediation activities
• Communicate technical findings and security recommendations to stakeholders
• Provide technical leadership, mentoring, and knowledge transfer to other security professionals
• Support team operations, priorities, and delivery of security testing activities

Requirements

• Extensive hands-on experience conducting complex penetration testing and simulated attack exercises
• Strong experience testing enterprise web applications, mobile applications, and infrastructure environments
• Expertise in penetration testing across Windows and Linux platforms
• Proficiency with commercial and bespoke penetration testing tools and vulnerability assessment techniques
• Experience leading penetration testing engagements and reviewing technical security assessments
• Knowledge of digital forensics, including evidence preservation, recovery, and analysis
• Strong technical reporting, stakeholder communication, and remediation advisory skills
• Experience mentoring technical teams and providing cyber security leadership

Highly regarded certifications include:

• CREST Certified Tester / Registered Penetration Tester

• CHECK Team Leader

• CompTIA Security+ or PenTest+

• Certified Ethical Hacker (CEH)

• Offensive Security Certified Expert (OSCE3)