Penetration Testing | Offensive Security | OSCP Required | Cyber Assurance

We are partnering with a leading Sydney-based organisation seeking a technically strong Cyber Security Testing Lead to oversee security testing activities. Sitting within the cyber assurance controls function you will be the go-to testing specialist and help increase internal pen testing capability.

This is an excellent opportunity for a Senior Penetration Tester, Offensive Security Consultant or Security Testing Lead looking to take greater ownership of security testing strategy, vendor relationships and technical capability development.

The Opportunity

- Own and oversee security testing activities, including penetration testing, vulnerability assessments, application security and adversary simulations.
- Manage external testing providers, validating scopes, challenging methodologies and ensuring the quality of findings.
- Remain technically hands-on, reproducing vulnerabilities, retesting findings and validating remediation.
- Act as a technical SME, supporting Cyber, Infrastructure and Security Operations teams through security assessments and adversary simulation exercises.
- Guide and oversee internal testers, providing technical direction and ensuring testing standards are maintained.
- Build internal capability, play a key role in transitioning more security testing in-house over the next 12 months, helping establish and develop an internal testing team.




- Review and communicate security findings, working with stakeholders to prioritise and resolve vulnerabilities.

About You

- OSCP certification is mandatory.
- Strong practical experience in penetration testing, offensive security or technical security testing.
- Approximately 5+ years' cybersecurity experience, ideally including application security, vulnerability assessments or red-team exercises.
- Confident reviewing testing methodologies, validating findings and challenging external service providers.
- Excellent communication skills, with the ability to engage technical and non-technical stakeholders.
- Leadership potential and an interest in developing people, processes and internal security testing capability.

Why Consider This Role?

- Opportunity to take ownership of a security testing function and influence its future direction.
- Build an internal testing capability rather than simply deliver individual penetration testing engagements.
- Balance hands-on technical work with stakeholder engagement, oversight and technical leadership.
- Work in a collaborative environment with opportunities to develop broader cybersecurity expertise.

If you're an OSCP-certified penetration tester or offensive security skilled looking to broaden your responsibilities and help shape an internal security testing capability, we'd welcome a conversation.

📌 Security Penetration Testing Lead (Sydney)
🏢 JS Careers Pty
📍 Sydney