Lead Penetration Tester – Services Australia

Rate Guide: $125–$150 per hour + superannuation (depending on experience)

Location: Canberra (ACT), Melbourne (VIC), Brisbane (QLD) or Adelaide (SA)

Contract: 12 months + potential extensions of up to 24 months

Estimated Start: 1 February 2027 (subject to confirmation)

Working Arrangements: Hybrid – initially onsite for 6 weeks, then generally at least 3 days per week onsite.

Security Clearance: Active NV1 required before commencement

Hours: Full time, with working hours subject to confirmation

About the Opportunity

Babylon Data is seeking experienced Lead Penetration Testers to support Services Australia in delivering complex cyber security testing, vulnerability assessments and simulated attack exercises across critical Australian Government systems.

With a requirement for at least 10 experienced professionals, this opportunity offers the chance to contribute to the security of large-scale enterprise platforms supporting millions of Australians.

Successful candidates will bring strong hands-on penetration testing expertise, demonstrated technical leadership and the ability to identify, assess and communicate complex security vulnerabilities.

Key Responsibilities

- Lead complex penetration testing and vulnerability assessments across enterprise applications, networks and infrastructure.
- Conduct web application, mobile application and infrastructure penetration testing across Windows and Linux environments.
- Design and execute simulated cyber attack exercises to evaluate security controls and identify vulnerabilities.
- Develop, review and approve penetration testing methodologies, plans and test cases.
- Analyse technical risks, identify vulnerabilities and recommend practical remediation strategies.
- Conduct highly complex security analysis and research into emerging attack techniques and vulnerabilities.
- Prepare and review detailed technical reports, security assessments and recommendations for stakeholders.
- Work with system owners to establish testing scope,



evaluate findings and validate remediation activities.
- Provide specialist technical advice to improve organisational cyber security maturity.
- Mentor technical team members, share expertise and support effective team operations.

Essential Requirements To be considered, candidates must demonstrate:

- Significant experience conducting complex penetration testing in enterprise environments.
- Advanced experience with web application and infrastructure penetration testing.
- Strong technical knowledge of Windows and Linux operating environments.
- Demonstrated ability to lead penetration testing engagements and complex vulnerability assessments.
- Experience with simulated attack exercises, penetration testing tools and exploitation techniques.
- Ability to produce high-quality technical findings, risk assessments and remediation recommendations.
- Working knowledge of digital forensic techniques, including evidence collection, preservation and analysis.
- Strong stakeholder engagement, reporting and technical communication skills.
- Ability to obtain and hold an Australian Government NV1 security clearance, with NV1 required before commencement.
- Willingness to work onsite in Canberra, Melbourne, Brisbane or Adelaide as required.

Desirable Qualifications

Relevant certifications are highly regarded, including:

- CREST Registered or Certified Penetration Tester
- CREST Certified Infrastructure or Web Application Tester
- CHECK Team Leader
- Offensive Security certifications, including OSCE3
- GIAC Penetration Tester (GPEN)
- Certified Ethical Hacker (CEH)
- CompTIA PenTest+ or Security+

Equivalent practical experience and demonstrated technical expertise will also be considered.

Previous Australian Federal Government penetration testing experience will be highly regarded.

Working Arrangements The engagement will initially require onsite attendance for approximately six weeks.

Following this period, hybrid arrangements may be considered, generally requiring a minimum of three days per week onsite.

Candidates must reside within reasonable travelling distance of their nominated Services Australia office.

📌 Lead Penetration Testers (Canberra)
🏢 Babylon Data
📍 Canberra