Axiom Data
All roles

Lead Penetration Tester

Services Australia

Australian citizens only NV1 clearance Hybrid, from the agency's premises in Canberra Closes 29 Oct 2026

Eligibility - please read before applying

This role is open to Australian citizens only. Applicants must also hold a current and ACTIVE NV1 Australian Government security clearance. An ability to obtain a clearance is NOT sufficient for this role.

This is an Australian Federal Government engagement based in Australia. Applications from candidates who are not Australian citizens, or who do not meet the security clearance requirement above, cannot be considered - regardless of technical experience. We are unable to sponsor visas, and this role cannot be performed remotely or from offshore.

About the Role

Services Australia is seeking a minimum of ten Lead Penetration Testers (EL1 equivalent) for its cyber security function, working hybrid from the agency's premises in Canberra, Adelaide, Brisbane or Melbourne. Penetration Testers analyse IT systems to determine configuration weaknesses and faults that would impact on security and business, then produce reports detailing the findings and recommendations for improved network security. Cyber Security Penetration Testers conduct complex penetration testing and highly sensitive vulnerability assessment activities: they simulate different types of cyber security attacks and develop penetration testing methodologies. At Lead level the role oversees test execution, approves security testing plans, leads threat simulation activities, provides highly technical subject matter expertise to system owners and stakeholders, coaches other staff and leads the operations of a team.

Oversee the execution of test cases using in-depth technical analysis of risks and typical vulnerabilities; lead cyber penetration testing and vulnerability assessments using relevant tools and methods against a variety of technologies; conduct and lead complex threat simulation activities to identify weaknesses and/or opportunities in technical security controls; oversee the catalogue of test findings and potential measures; oversee and approve security testing plans; provide highly technical subject matter expertise to system owners and stakeholders to improve system security posture; conduct highly complex analysis and research to identify improvements to cyber threat tools, techniques and procedures; manage and coordinate a variety of risk analysis and assessments on cyber security matters; perform web application and mobile penetration testing against complex enterprise platforms using a variety of technologies; conduct infrastructure penetration testing against enterprise grade systems; collaborate with system owners to develop test scope and preparation for testing, ensuring remediation has been completed effectively; review reports, briefs and documentation and communicate technical findings and recommendations; transfer highly technical skills and knowledge to other staff through continuous coaching and on-the-job training to support succession planning; lead and support the operations of a team, including setting priorities and managing performance, resources and workflows; exercise delegations in line with legislation and guidelines.

Key Responsibilities

  • Lead cyber penetration testing and vulnerability assessments using relevant tools and methods against a variety of technologies; oversee the execution of test cases using in-depth technical analysis of risks and typical vulnerabilities.
  • Perform web application and mobile penetration testing against complex enterprise platforms, and infrastructure penetration testing against enterprise grade systems.
  • Conduct and lead complex threat simulation activities to identify weaknesses and opportunities in technical security controls; undertake penetration exploits as part of simulated attack exercises.
  • Oversee and approve security testing plans; oversee the catalogue of test findings and potential measures; collaborate with system owners on test scope, preparation and confirmation that remediation has been completed effectively.
  • Provide highly technical subject matter expertise to system owners and stakeholders; conduct highly complex analysis and research to improve cyber threat tools, techniques and procedures; manage and coordinate risk analysis and assessments on cyber security matters.
  • Basic digital forensic tasks (e.g. first responder) without supervision, and some experience of more complex forensic work (specialist tools to recover, preserve and analyse data) under supervision.
  • Review reports, briefs and documentation; communicate technical findings and recommendations clearly to technical and non-technical audiences.
  • Lead and support the operations of a team: set priorities, manage performance, resources and workflows; coach and train other staff to support succession planning; exercise delegations in line with legislation and guidelines.
  • Certifications: CHECK Team Leader, CREST Certified Tester (Infrastructure or Web Applications) or equivalents are named in the essential criteria. Desirable (not mandatory): CompTIA Security+, CompTIA PenTest+, Certified Ethical Hacker, CREST Registered Penetration Tester, OSCE3, GIAC Penetration Tester.

Essential Criteria

  1. Undertakes basic forensic tasks (e.g. first responder) without supervision. Has some experience of more complex tasks (e.g. using specialist tools to recover, preserve and analyse data) under supervision.
  2. Uses commercial and bespoke tools to conduct complex penetration testing without close supervision and/or leads teams undertaking complex penetration tests. Undertakes penetration exploits as part of a simulated attack exercise under direction. Appropriate and relevant certifications include CHECK Team Leader, CREST Certified Tester (Infrastructure or Web Applications) or equivalents.

Desirable Criteria

  • Desirable qualifications (not mandatory): CompTIA Security+, CompTIA PenTest+, Certified Ethical Hacker (CEH), CREST Registered Penetration Tester (CRT), Offensive Security Certified Expert 3 (OSCE3), GIAC Penetration Tester (GPEN).

Role Details

CitizenshipAustralian citizens only
Security ClearanceNV1 - must hold an ACTIVE clearance at time of application
ContractMinimum of ten positions. Estimated start published as 1 February 2027 (the RFQ prints '01 February 2927'). Initial contract 12 months; extension term 'Other' - up to a maximum of 24 months. Lead - EL1 equivalent. A maximum of two candidates per seller.
LocationHybrid, from the agency's premises in Canberra (ACT), Adelaide (SA), Brisbane (QLD) or Melbourne (VIC). The Labour Hire Worker is expected to be in the office for the first six weeks before a hybrid flexible working arrangement will be considered; WFH arrangements usually require a minimum of three days per week onsite, and will be considered only where the worker is within reasonable travel time of the nominated office for ad hoc or emergency attendance. Maximum hours published as 80 per week.
Max Candidates2 per seller

This opportunity is sourced through the Australian Government's BuyICT panel for ICT Labour Hire services.

Apply for this role

A few questions up front so we can assess you quickly. Takes about three minutes.

About you
Eligibility

This role requires a NV1 clearance — see the eligibility notes above.

Availability and rate

Quote your all-inclusive hourly rate. If you contract through your own company, include superannuation.

Documents
Consent *

If you are selected for submission to the client, one of our team members will contact you first.