Penetration Tester

Lead Penetration Testers

Location: Canberra, Brisbane, Melbourne or Adelaide

Contract: 12 months + potential extensions up to 24 months

Start Date: February 2027

Security Clearance: NV1 required

Working Arrangements: Hybrid

Bridge IT Engineering is seeking experienced Lead Penetration Testers to support a major Federal Government department in delivering complex penetration testing, vulnerability assessments and cyber security assurance activities.

About the Role

Our Federal Government client is seeking experienced Lead Penetration Testers to identify, assess and mitigate security vulnerabilities across complex enterprise ICT environments. The successful candidates will lead sophisticated penetration testing activities across web applications, mobile applications and infrastructure platforms, conducting simulated cyber attacks and providing technical recommendations to strengthen security controls. Working closely with technical teams and key stakeholders, you will play an important role in improving the organisation's overall cyber security posture.

Key Responsibilities

• Lead complex penetration testing and vulnerability assessments across enterprise ICT environments.
• Conduct web application, mobile application and infrastructure penetration testing.
• Design and execute simulated cyber attacks to identify security weaknesses and vulnerabilities.
• Develop, review and approve penetration testing plans, methodologies and technical reports.
• Identify security risks and provide practical remediation recommendations.
• Utilise commercial and bespoke penetration testing tools to assess security controls.
• Collaborate with system owners and technical teams to define testing scope and validate remediation activities.
• Communicate technical findings and security recommendations to stakeholders.
• Provide technical leadership, mentoring and knowledge transfer to other security professionals.
• Support team operations, priorities and delivery of security testing activities.

Skills and Experience

To be successful in this role, you will demonstrate:

• Extensive hands-on experience conducting complex penetration testing and simulated attack exercises.
• Strong experience testing enterprise web applications, mobile applications and infrastructure environments.
• Expertise in penetration testing across Windows and Linux platforms.
• Proficiency with commercial and bespoke penetration testing tools and vulnerability assessment techniques.
• Experience leading penetration testing engagements and reviewing technical security assessments.
• Knowledge of digital forensics, including evidence preservation, recovery and analysis.
• Strong technical reporting, stakeholder communication and remediation advisory skills.
• Experience mentoring technical teams and providing cyber security leadership.

Highly regarded certifications include:

• CREST Certified Tester / Registered Penetration Tester
• CHECK Team Leader
• CompTIA Security+ or PenTest+
• Certified Ethical Hacker (CEH)
• Offensive Security Certified Expert (OSCE3)
• GIAC Penetration Tester (GPEN)

Previous experience within Federal Government or complex enterprise ICT environments will be highly regarded.

Bridge IT Engineering – Connecting employers and candidates with consideration, professionalism and care since 1999.