Security Penetration Testing Lead

Penetration Testing | Offensive Security | OSCP Required | Cyber Assurance We are partnering with a leading Sydney-based organisation seeking a technically strong Cyber Security Testing Lead to oversee security testing activities. Sitting within the cyber assurance controls function you will be the go-to testing specialist and help increase internal pen testing capability.

This is an excellent opportunity for a Senior Penetration Tester, Offensive Security Consultant or Security Testing Lead looking to take greater ownership of security testing strategy, vendor relationships and technical capability development.

The Opportunity - Own and oversee security testing activities , including penetration testing, vulnerability assessments, application security and adversary simulations.

• Manage external testing providers, validating scopes, challenging methodologies and ensuring the quality of findings.
• Remain technically hands-on , reproducing vulnerabilities, retesting findings and validating remediation.
• Act as a technical SME , supporting Cyber, Infrastructure and Security Operations teams through security assessments and adversary simulation exercises.
• Guide and oversee internal testers , providing technical direction and ensuring testing standards are maintained.
• Build internal capability, play a key role in transitioning more security testing in-house over the next 12 months, helping establish and develop an internal testing team.
• Review and communicate security findings, working with stakeholders to prioritise and resolve vulnerabilities.

About You - OSCP certification is mandatory.

• Strong practical experience in penetration testing, offensive security or technical security testing.
• Approximately 5+ years' cybersecurity experience, ideally including application security, vulnerability assessments or red-team exercises.
• Confident reviewing testing methodologies, validating findings and challenging external service providers.
• Excellent communication skills, with the ability to engage technical and non-technical stakeholders.
• Leadership potential and an interest in developing people, processes and internal security testing capability.

Why Consider This Role? - Opportunity to take ownership of a security testing function and influence its future direction.

• Build an internal testing capability rather than simply deliver individual penetration testing engagements.
• Balance hands-on technical work with stakeholder engagement, oversight and technical leadership.
• Work in a collaborative environment with opportunities to develop broader cybersecurity expertise.

If you're an OSCP-certified penetration tester or offensive security professional looking to broaden your responsibilities and help shape an internal security testing capability, we'd welcome a conversation.