Lead Penetration Tester

Lead Penetration Tester | NV1 | Federal Government | Canberra, Melbourne, Brisbane or Adelaide

ASJ Tech is seeking experienced Lead Penetration Testers for a major Federal Government agency. This is a 12-month labour hire contract, starting February 2027, with hybrid working available after an initial 6 weeks onsite.

About the role

You'll lead complex penetration testing and vulnerability assessments across enterprise web applications, mobile platforms and infrastructure. You'll run threat simulation exercises, approve test plans and give system owners practical recommendations to strengthen their security posture. You'll also mentor and coach other testers and help shape the team's testing methods, tools and techniques.

What you'll do

• Lead penetration testing of web, mobile and infrastructure (Windows and Linux) environments
• Plan, oversee and approve security testing activities and test cases
• Conduct simulated attack exercises to identify weaknesses in security controls
• Work with system owners to scope testing and confirm remediation
• Report and present technical findings to stakeholders
• Coach team members and manage priorities and workflows

What we're looking for

• Extensive hands-on penetration testing experience, including leading teams on complex engagements
• Strong web application and infrastructure testing skills using commercial and bespoke tools
• First-responder forensics experience, ideally with exposure to evidence recovery and analysis
• Current NV1 clearance (or the ability to obtain it)
• Australian citizenship
• Certifications highly regarded: CREST CRT/CCT, CHECK Team Leader, OSCP/OSCE3, GIAC GPEN, CEH or PenTest+

Location: Canberra, Melbourne, Brisbane or Adelaide (hybrid)

Contract: 12 months, with an estimated start of February 2027

Applications close soon. Apply now or call 0401 904 401 for a confidential discussion.

The LinkedIn "Skills" field takes tags rather than text, so add these there: Penetration Testing, Vulnerability Assessment, Web Application Security, Red Teaming, Digital Forensics, Kali Linux, Burp Suite, Metasploit, CREST, NV1.