Lead Penetration Tester

About This Role

Key Responsibilities

• Conducting advanced penetration testing across web and mobile applications, APIs, cloud environments and IT infrastructure
• Performing Red Team operations and adversary emulation exercises to identify potential security weaknesses
• Identifying and validating vulnerabilities, recommending practical remediation strategies and working with teams to address security risks
• Providing security advice throughout the design and development lifecycle
• Collaborating with Cyber Security teams, technical specialists and business stakeholders
• Providing technical guidance and recommendations to senior stakeholders
• Developing technical documentation and supporting ongoing improvements to security testing practices

Requirements

• Strong hands-on experience in penetration testing, ethical hacking and offensive security
• Experience testing across web applications, APIs, mobile applications, networks and cloud environments
• Practical experience with Red Team operations and adversary emulation
• Strong understanding of network protocols, vulnerabilities and exploitation techniques
• Scripting or programming experience with Python, C, Golang or similar
• Strong analytical and problem-solving skills, with the ability to communicate technical findings clearly
• Australian citizenship is essential, along with the ability to obtain an NV1 security clearance

Preferred Skills and Qualifications

• Certifications such as OSCP, OSCE, GWAPT, GXPN or GMOB would be highly regarded
• Experience with AWS, Kubernetes and automated security testing would also be beneficial