Location: Canberra, Brisbane, Melbourne or Adelaide
Contract: 12 months + potential extensions up to 24 months
Start Date: February 2027
Security Clearance: NV1 required
Working Arrangements: Hybrid
Bridge IT Engineering is seeking experienced Lead Penetration Testers to support a major Federal Government department in delivering complex penetration testing, vulnerability assessments and cyber security assurance activities.
About the Role
Our Federal Government client is seeking experienced Lead Penetration Testers to identify, assess and mitigate security vulnerabilities across complex enterprise ICT environments. The successful candidates will lead sophisticated penetration testing activities across web applications, mobile applications and infrastructure platforms, conducting simulated cyber attacks and providing technical recommendations to strengthen security controls. Working closely with technical teams and key stakeholders, you will play an important role in improving the organisation's overall cyber security posture.
Key Responsibilities
- Lead complex penetration testing and vulnerability assessments across enterprise ICT environments.
- Conduct web application, mobile application and infrastructure penetration testing.
- Design and execute simulated cyber attacks to identify security weaknesses and vulnerabilities.
- Develop, review and approve penetration testing plans, methodologies and technical reports.
- Identify security risks and provide practical remediation recommendations.
- Utilise commercial and bespoke penetration testing tools to assess security controls.
- Collaborate with system owners and technical teams to define testing scope and validate remediation activities.
- Communicate technical findings and security recommendations to stakeholders.
- Provide technical leadership, mentoring and knowledge transfer to other security professionals.
- Support team operations, priorities and delivery of security testing activities.
Skills and Experience To be successful in this role, you will demonstrate:
- Extensive hands-on experience conducting complex penetration testing and simulated attack exercises.
- Strong experience testing enterprise web applications, mobile applications and infrastructure environments.
- Expertise in penetration testing across Windows and Linux platforms.
- Proficiency with commercial and bespoke penetration testing tools and vulnerability assessment techniques.
- Experience leading penetration testing engagements and reviewing technical security assessments.
- Knowledge of digital forensics, including evidence preservation, recovery and analysis.
- Solid technical reporting, stakeholder communication and remediation advisory skills.
- Experience mentoring technical teams and providing cyber security leadership.