Regional Queensland | 12-Month Contract + 2 x 12-Month Extensions | Predominantly Remote

Your new company

We are currently partnering with a consultancy supporting a regional Queensland local government organisation - they are seeking an experienced Cyber Security Penetration Tester to support a broader cyber security uplift and ICT governance program. Working alongside internal ICT teams, external service providers and key stakeholders, you will play a critical role in identifying security vulnerabilities, validating security controls and supporting cyber resilience initiatives across the organisation.

Your new role

As a Penetration Tester, you will be responsible for conducting security assessments across a range of infrastructure, cloud and application environments. You will identify vulnerabilities, assess associated risks and provide practical remediation recommendations to improve the organisation's security posture.

Key responsibilities will include

- Performing penetration testing and vulnerability assessments across cloud, infrastructure and application environments.
- Assessing the effectiveness of cyber security controls and identifying security weaknesses.
- Producing detailed technical and executive-level reports outlining findings and recommended remediation actions.
- Supporting cyber maturity improvement initiatives and security uplift activities.
- Assisting with cyber incident investigations and response activities where required.
- Working collaboratively with ICT,



security and third-party stakeholders to remediate identified risks.
- Supporting governance, risk and compliance objectives through security assurance activities.
- Contributing to security reviews, audits and cyber security improvement programs.

What you'll need to succeed To be successful in this role, you will demonstrate:

- Proven experience in penetration testing, ethical hacking or cyber security assurance.
- Experience conducting infrastructure, network, web application or cloud security assessments.
- Strong knowledge of common attack vectors, vulnerability assessment methodologies and remediation practices.
- Experience with tools such as Burp Suite, Nessus, Tenable, Metasploit, Kali Linux, Nmap, Qualys or similar.
- Understanding of cyber security frameworks including Essential Eight, NIST, ISO 27001 or CIS Controls.
- Solid report writing and stakeholder engagement skills.
- The ability to communicate technical security findings to both technical and non-technical audiences.
- Experience within government, critical infrastructure, utilities, financial services or other regulated environments will be highly regarded.

What you'll get in return

- Long-term contract opportunity with an initial 12-month + extensions
- Predominantly remote working arrangement with occasional travel as required
- Opportunity to contribute to a significant cyber security uplift program.
- Work across a diverse range of cyber security initiatives and technologies
- Potential contract extensions up to an additional 24 months

📌 Penetration Tester (Queensland)
🏢 Hays
📍 Queensland