Profectus is seeking experienced Lead Penetration Testers to support the delivery of security testing services within an agency of the Australian Government.
The work involves assessing ICT applications, infrastructure and gateway environments to identify configuration weaknesses, vulnerabilities and faults that affect security, then reporting findings and recommending remediation.
These are senior roles leading complex testing activity in highly secure, tightly governed environments, working alongside security, engineering and project teams.Key ResponsibilitiesConduct penetration testing across ICT applications, infrastructure and gateway environmentsLead and coordinate teams undertaking complex penetration testing activityApply a range of penetration testing techniques, methodologies and commercial and bespoke toolsDevelop test plans, scoping documents and procedures for individual engagementsRecord approaches, techniques and results to support accurate and repeatable reportingProduce transparent technical reports detailing findings, risk ratings and recommended solutionsRecommend technical remediation for identified vulnerabilities and support follow up validationParticipate in simulated attack exercises and related security assessment activityProvide technical guidance and mentoring to less experienced testersEngage with system owners and technical stakeholders to explain findings and agreed actionsMaintain testing documentation,



tooling and standards to a consistent qualityRequired ExperienceExtensive experience conducting penetration tests against applications, infrastructure and gateway environmentsProven ability to plan, lead and deliver complex testing engagements without close supervisionStrong working knowledge of penetration testing methodologies, tools and reporting standardsExperience identifying, exploiting and documenting vulnerabilities across networks, operating systems and web applicationsAbility to translate technical findings into practical remediation advice for technical and non technical audiencesExperience working within secure, highly regulated environmentsStrong written reporting skills with attention to accuracy and detailRelevant certifications such as CREST Certified Tester (Infrastructure or Web Applications), CHECK Team Leader or equivalentExperience contributing to simulated attack exercisesExperience with scripting and automation to support testing activityPrior experience delivering security testing services to Australian Government clientsSecurity Clearance Requirementsmust be an Australian Citizenmust hold a current Positive Vetting (TSPV) security clearanceWorking ArrangementsonsiteWhy ProfectusProfectus partners with Australian Government agencies to deliver trusted ICT capability across complex delivery programs.
We take a long term, relationship driven approach, supporting our people across the full lifecycle of their engagement while contributing to outcomes of national importance.
#J-*****-Ljbffr

📌 Penetration Tester (Canberra)
🏢 Profectus
📍 Canberra