Lead Penetration Tester

Lead Penetration Tester | EL1 Equivalent

12-Month Contract + 12-Month Extension | NV1 Eligible | Hybrid | Australia-Wide Locations

Are you an experienced Penetration Tester who thrives on identifying vulnerabilities before adversaries do?

We are seeking a Lead Penetration Tester to join a high-performing cyber security team responsible for protecting critical systems and services. This is a hands-on offensive security role suited to a senior cyber professional with deep penetration testing expertise across modern enterprise environments.
Working within a collaborative security function, you will conduct advanced penetration testing, red team activities and adversary emulation exercises while providing strategic security advice to technical and executive stakeholders.

Key Responsibilities

• Conduct penetration testing across web applications, mobile applications, APIs, cloud platforms and infrastructure environments.
• Perform network, wireless and infrastructure security assessments.
• Lead offensive security engagements and red team operations.
• Identify, validate and report security vulnerabilities and recommend remediation strategies.
• Develop proof-of-concept exploits and security testing tools.
• Collaborate with engineering, security and product teams to embed security into design and delivery processes.
• Support security monitoring, compliance and risk management initiatives.
• Provide expert technical advice to senior stakeholders.
• Produce high-quality technical reports, findings and recommendations.
• Contribute to continuous improvement of security testing methodologies and tooling.

Essential Experience

• Extensive penetration testing and offensive security experience.
• Experience assessing:
  • Web Applications
  • Mobile Applications
  • APIs
  • Cloud Platforms
  • Kubernetes Environments
  • Networks & Wireless Infrastructure
• Strong understanding of network protocols and security architecture.
• Demonstrated experience conducting Red Team and adversary emulation activities.
• Ability to analyse complex security problems and develop innovative solutions.
• Experience developing tools, scripts or exploits using:
  • Python
  • Golang
  • C
  • Other scripting languages
• Strong stakeholder engagement and communication skills.

Highly Regarded Certifications One or more of the following certifications will be highly advantageous:

• OSCP
• OSCE
• GXPN
• GWAPT
• GMOB
• CREST Certifications

Desirable Experience

• Automated security testing and security tooling.
• AWS security and cloud penetration testing.
• Security documentation and technical reporting.
• DevSecOps and cloud-native security environments.

Requirements

• Australian Citizenship is mandatory.
• Ability to obtain and maintain a Negative Vetting Level 1 (NV1) Security Clearance.
• Available to work in a hybrid environment.
• Candidates located in ACT, NSW, VIC, QLD, SA, WA or TAS are encouraged to apply.

What's on Offer?

• Long-term contract opportunity.
• Work on complex, large-scale environments.
• Exposure to modern cloud, Kubernetes and enterprise security platforms.
• Opportunity to lead offensive security engagements and influence organisational security outcomes.
• Flexible hybrid working arrangements.

If you're an experienced Penetration Tester, Red Team Operator or Offensive Security Specialist looking for your next challenge, we'd love to hear from you.


Peoplebank and Leaders IT are committed to creating a diverse and inclusive workplace where everyone belongs. We welcome applications from people of all backgrounds, identities, and experiences. If you need adjustments to the recruitment process due to your circumstances, please let us know—we’re here to support you.