Lead Penetration Tester | NV1 | Federal Government | Canberra, Melbourne, Brisbane or Adelaide

ASJ Tech is seeking experienced Lead Penetration Testers for a major Federal Government agency. This is a 12-month labour hire contract, starting February 2027, with hybrid working available after an initial 6 weeks onsite.

About the role

You’ll lead complex penetration testing and vulnerability assessments across enterprise web applications, mobile platforms and infrastructure. You’ll run threat simulation exercises, approve test plans and give system owners practical recommendations to strengthen their security posture. You’ll also mentor and coach other testers and help shape the team's testing methods, tools and techniques.

What you’ll do
Lead penetration testing of web, mobile and infrastructure (Windows and Linux) settings
Plan, oversee and approve security testing activities and test cases
Conduct simulated attack exercises to identify weaknesses in security controls




Work with system owners to scope testing and confirm remediation
Report and present technical findings to stakeholders
Coach team members and manage priorities and workflows

What we’re looking for
Extensive hands-on penetration testing experience, including leading teams on complex engagements
Robust web application and infrastructure testing skills using commercial and bespoke tools
First-responder forensics experience, ideally with exposure to evidence recovery and analysis
Current NV1 clearance (or the ability to obtain it)
Certifications highly regarded: CREST CRT/CCT, CHECK Team Leader, OSCP/OSCE3, GIAC GPEN, CEH or PenTest+

Location:

Canberra, Melbourne, Brisbane or Adelaide (hybrid)

Contract:

12 months, with an estimated start of February 2027
J-18808-Ljbffr

📌 Lead Penetration Tester Canberra
🏢 Asj Tech
📍 Canberra