Penetration Tester

We're currently looking for an experienced Lead Penetration Tester to join a large Federal Government organisation on an initial 12-month contract, with the option to extend for a further 12 months.

This is a great opportunity for someone who enjoys being hands-on technically, has a strong background in offensive security and is confident working with a range of stakeholders to identify and address complex security vulnerabilities.

You'll be joining an established technology and security environment, working across a range of platforms, applications and infrastructure to help strengthen the organisation's overall security posture.

What you'll be doing

• Conducting advanced penetration testing across web and mobile applications, APIs, cloud environments and IT infrastructure.
• Performing Red Team operations and adversary emulation exercises to identify potential security weaknesses.
• Identifying and validating vulnerabilities, recommending practical remediation strategies and working with teams to address security risks.
• Providing security advice throughout the design and development lifecycle.
• Collaborating with Cyber Security teams, technical specialists and business stakeholders.
• Providing technical guidance and recommendations to senior stakeholders.
• Developing technical documentation and supporting ongoing improvements to security testing practices.

What we're looking for

• Strong hands-on experience in penetration testing, ethical hacking and offensive security.
• Experience testing across web applications, APIs, mobile applications, networks and cloud environments.
• Practical experience with Red Team operations and adversary emulation.
• Strong understanding of network protocols, vulnerabilities and exploitation techniques.
• Scripting or programming experience with Python, C, Golang or similar.
• Strong analytical and problem-solving skills, with the ability to communicate technical findings clearly.
• Certifications such as OSCP, OSCE, GWAPT, GXPN or GMOB would be highly regarded.
• Experience with AWS, Kubernetes and automated security testing would also be beneficial.

The opportunity

• Contract: Initial 12 months + potential extension
• Location: Multiple locations across Australia – Brisbane, Sydney, Melbourne, Canberra
• Working arrangements: Hybrid, minimum 3 days per week in the office
• Eligibility: Australian citizenship is essential, along with the ability to obtain an NV1 security clearance.

Apply Now

To apply, please send your resume or contact Abbie for a confidential discussion: abbie@blackroc.co / 0413 444 157