Lead Penetration Tester

Lead Penetration Tester | NV1 | Federal Government | Canberra, Melbourne, Brisbane or Adelaide ASJ Tech is seeking experienced Lead Penetration Testers for a major Federal Government agency. This is a 12-month labour hire contract, starting February 2027, with hybrid working available after an initial 6 weeks onsite.

About the role You’ll lead complex penetration testing and vulnerability assessments across enterprise web applications, mobile platforms and infrastructure. You’ll run threat simulation exercises, approve test plans and give system owners practical recommendations to strengthen their security posture. You’ll also mentor and coach other testers and help shape the team's testing methods, tools and techniques.

What you’ll do - Lead penetration testing of web, mobile and infrastructure (Windows and Linux) environments

• Plan, oversee and approve security testing activities and test cases
• Conduct simulated attack exercises to identify weaknesses in security controls
• Work with system owners to scope testing and confirm remediation
• Report and present technical findings to stakeholders
• Coach team members and manage priorities and workflows

What we’re looking for - Extensive hands-on penetration testing experience, including leading teams on complex engagements

• Strong web application and infrastructure testing skills using commercial and bespoke tools
• First-responder forensics experience, ideally with exposure to evidence recovery and analysis
• Current NV1 clearance (or the ability to obtain it)
• Certifications highly regarded: CREST CRT/CCT, CHECK Team Leader, OSCP/OSCE3, GIAC GPEN, CEH or PenTest+

Location: Canberra, Melbourne, Brisbane or Adelaide (hybrid)

Contract: 12 months, with an estimated start of February 2027