12 months contract plus one extension

Location:
QLD, WA, ACT, VIC, NSW, SA, TAS Australian citizenship mandatory Lead Penetration Tester We are seeking an experienced Penetration Tester to undertake complex offensive security and penetration testing activities across enterprise technology environments. The successful candidate will operate with a high degree of independence, providing specialist security expertise, identifying vulnerabilities and helping ensure security risks are addressed early in the technology lifecycle. This role requires a strong hands-on penetration tester who is comfortable working across application, infrastructure, cloud and network environments, while also engaging effectively with technical teams, product owners and senior stakeholders.

Key Responsibilities

- Perform advanced penetration testing across mobile applications, web applications, APIs and IT infrastructure.
- Identify and validate security vulnerabilities and recommend appropriate remediation strategies.
- Conduct Red Team and adversary emulation activities.
- Provide security input during solution design and build phases to ensure security requirements are considered early.
- Work closely with Cyber Security, engineering, product and Identity & Access Management teams.
- Investigate complex security issues and coordinate remediation activities with relevant stakeholders.




- Provide specialist security advice to senior stakeholders.
- Contribute to security monitoring, compliance and assurance activities.
- Build and maintain strong working relationships across technical and non-technical teams.
- Produce high-quality technical findings, reports and supporting documentation. Must have
- 5+ years hands-on experience in offensive security and penetration testing across a range of technologies, including Mobile applications, Web applications, Apis, Kubernetes, Cloud environments, Networks and Wireless infrastructure
- Strong practical knowledge of network protocols.
- Experience conducting Red Team operations and adversary emulation exercises.
- Robust analytical, investigative and problem-solving capability, particularly when dealing with complex security issues.
- Ability to develop security tools, scripts or exploits using technologies such as Python, C, Golang or scripting languages.
- Relevant offensive security certifications in any of the following is GMOB, OSCE, OSCP, GWAPT or GXPN is mandatory Nice to have
- Experience defining and implementing automated security testing requirements across multiple platforms.
- Strong technical and procedural documentation skills.
- Good understanding of AWS cloud infrastructure.

📌 Lead Penetration Tester (Sydney)
🏢 SKL Technology
📍 Sydney