- Lead complex penetration testing across enterprise technology environments
- Deliver advanced simulated attacks and vulnerability assessments
- Long-term contract with extensions across multiple Australian locations

Lead advanced security testing and vulnerability assessments across complex enterprise environments.

Your new company

Join a large, nationally focused organisation delivering secure and reliable services to Australians. You'll work within an experienced cybersecurity environment where technical expertise, collaboration and practical security improvements are genuinely valued.

Your recent role

You'll take the lead on complex penetration testing, vulnerability assessments and simulated cyberattack activities across enterprise platforms. Working closely with system owners and technical stakeholders, you'll identify security weaknesses, clearly communicate findings and support effective remediation.

Your responsibilities will include

- Leading complex penetration testing and vulnerability assessments
- Performing web application, mobile and infrastructure penetration testing
- Designing and overseeing security testing plans and methodologies
- Conducting threat simulations across enterprise-grade environments
- Analysing technical risks, vulnerabilities and security controls
- Documenting findings and recommending practical remediation measures
- Confirming remediation activities have been completed effectively
- Providing technical guidance, coaching and knowledge transfer
- Supporting team priorities, resources and testing workflows





What you'll need to succeed You'll be an experienced cybersecurity professional who can independently conduct complex testing while also leading technical activities and supporting others.

You'll need

- An active NV1 security clearance
- Advanced penetration testing and simulated attack experience
- Experience using commercial and bespoke penetration testing tools
- Strong web application, mobile and infrastructure testing capability
- Experience identifying, documenting and communicating complex vulnerabilities
- Practical knowledge of forensic tasks, evidence preservation and analysis
- Strong stakeholder communication and technical report-writing skills
- The ability to lead testing activities without close supervision

Qualifications such as CREST, CHECK Team Leader, OSCE3, GIAC, CEH, CompTIA Security+ or PenTest+ will be highly regarded but are not mandatory. What you'll get in return

You'll secure an initial 12-month contract commencing in February 2027, with extension options of up to 24 months. The opportunity is available across the ACT, Queensland, Victoria and South Australia, offering the chance to contribute to meaningful, technically challenging cybersecurity work.

What you need to do now

If you're interested in this role, click 'apply now' or forward an up-to-date copy of your CV to [email protected], or call us now.

If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion about your career.

Applications must be submitted by 9:00 am Thursday, 29 October 2026 .

📌 Lead Penetration Tester (Canberra)
🏢 Hays
📍 Canberra