We're currently looking for an experienced Lead Penetration Tester to join a large Federal Government organisation on an initial 12-month contract, with the option to extend for a further 12 months.

This is a great opportunity for someone who enjoys being hands-on technically, has a strong background in offensive security and is confident working with a range of stakeholders to identify and address complex security vulnerabilities.

You’ll be joining an established technology and security environment, working across a range of platforms, applications and infrastructure to help strengthen the organisation’s overall security posture.

We're currently looking for an experienced Lead Penetration Tester to join a large Federal Government organisation on an initial 12-month contract, with the option to extend for a further 12 months.

This is a great opportunity for someone who enjoys being hands-on technically, has a strong background in offensive security and is confident working with a range of stakeholders to identify and address complex security vulnerabilities.

You’ll be joining an established technology and security workplace, working across a range of platforms, applications and infrastructure to help strengthen the organisation’s overall security posture.

What you’ll be doing

- Conducting advanced penetration testing across web and mobile applications, APIs, cloud environments and IT infrastructure.
- Performing Red Team operations and adversary emulation exercises to identify potential security weaknesses.
- Identifying and validating vulnerabilities,



recommending practical remediation strategies and working with teams to address security risks.
- Providing security advice throughout the design and development lifecycle.
- Collaborating with Cyber Security teams, technical specialists and business stakeholders.
- Providing technical guidance and recommendations to senior stakeholders.
- Developing technical documentation and supporting ongoing improvements to security testing practices.

What we’re looking for

- Strong hands-on experience in penetration testing, ethical hacking and offensive security.
- Experience testing across web applications, APIs, mobile applications, networks and cloud environments.
- Practical experience with Red Team operations and adversary emulation.
- Strong understanding of network protocols, vulnerabilities and exploitation techniques.
- Scripting or programming experience with Python, C, Golang or similar.
- Strong analytical and problem-solving skills, with the ability to communicate technical findings clearly.
- Certifications such as OSCP, OSCE, GWAPT, GXPN or GMOB would be highly regarded.
- Experience with AWS, Kubernetes and automated security testing would also be beneficial.

The opportunity

- Contract: Initial 12 months + potential extension
- Location: Multiple locations across Australia – Brisbane, Sydney, Melbourne, Canberra
- Working arrangements: Hybrid, minimum 3 days per week in the office
- Eligibility: Australian citizenship is essential, along with the ability to obtain an NV1 security clearance.

#J-18808-Ljbffr

📌 Penetration Tester (Sydney)
🏢 BLACKROC Recruitment
📍 Sydney