Lead Penetration Testers | Multiple Contract Opportunities

Note: These positions are strictly for Australian Citizens holding NV1 or able to get NV1 before commencement of the role. Any applications from overseas for non-Australian Citizens will NOT be entertained.

Company Description:

Master2Manage® Pty Limited is an Australian-owned management and technology consulting company supporting government agencies, regulated industries, and private organisations to strengthen cyber resilience and deliver secure ICT outcomes. The firm combines strategic advisory with hands-on delivery across ICT labour hire, cybersecurity governance and assurance, ICT project and program delivery, and corporate and ICT training. Its integrated capability spans enterprise architecture, business analysis, governance and risk management, compliance and audit readiness, AI engineering, and solution implementation. Consultants have delivered cybersecurity and digital transformation initiatives for Commonwealth and state government, defence, healthcare, critical infrastructure, and commercial clients. Master2Manage is an approved supplier under the BuyICT Digital Marketplace 2.0 and BuyNSW ICT Services Scheme, providing professional consulting services and ICT labour hire.

Position Details:

• Locations: Canberra, Melbourne, Brisbane or Adelaide
• Contract Duration: 12 months
• Indicative Rate: $120–$130 per hour (including superannuation)
• Expected Commencement: February 2027
• Security Clearance: NV1 required before commencement (current NV1 preferred)
• Work Arrangement: Initial 6 weeks onsite, followed by potential hybrid arrangements (typically 3 days onsite per week)
• Seniority: Lead / EL1 equivalent

Key Responsibilities:

• Lead complex penetration testing and vulnerability assessments across enterprise ICT environments.
• Conduct advanced web application, mobile application and infrastructure penetration testing.
• Plan and execute simulated cyberattacks to identify exploitable vulnerabilities and weaknesses in security controls.
• Develop testing methodologies, testing plans and scopes, and oversee technical execution.
• Undertake forensic analysis, technical security research and risk assessments.
• Assess remediation effectiveness and provide practical recommendations to strengthen security.
• Deliver comprehensive technical reports and communicate findings to technical and non-technical stakeholders.
• Provide technical leadership, mentoring and oversight of security testing activities.

Essential Skills and Experience:

• Extensive hands-on experience in enterprise penetration testing, vulnerability assessment and offensive security.
• Demonstrated capability in Penetration Testing and Simulated Attack Exercises (CIISEC Level 5).
• Demonstrated capability in Digital Forensics (CIISEC Level 4).
• Strong experience testing enterprise web applications and Windows/Linux infrastructure.
• Proven ability to lead complex technical assessments, manage competing priorities and engage stakeholders effectively.

Desirable Certifications:

CREST, CHECK Team Leader, OSCE3, GIAC GPEN, CEH, CompTIA PenTest+ or equivalent industry certifications.

Interested?

Suitable professionals are invited to send their CVs at careers@master2manage.com with their current clearance status, preferred location, desired rates, availability and an updated CV and LinkedIn profile.

Referrals from cybersecurity professionals are also welcome.