Senior Penetration Tester
Lead penetration testing engagements across enterprise and government clients — network, application, cloud and adversary simulation.
The role
SPG's Offensive Security practice delivers penetration testing and adversary simulation for enterprise and government clients in Australia and abroad. As a Senior Penetration Tester you will lead engagements end to end — scoping, execution, reporting and client debriefs — while mentoring junior testers and contributing to our offensive tooling and methodology. You will work across network infrastructure, web and mobile applications, cloud environments and physical security assessments, using black, grey and white box methodologies.
What you'll do
- Lead and deliver penetration testing engagements across network, application, cloud and wireless scopes
- Perform adversary simulation and red team exercises aligned to real-world threat actors
- Write clear, actionable reports and present findings to technical and executive audiences
- Mentor junior consultants and review their engagement output for quality
- Contribute to internal tooling, methodology and the RedScope Offensive platform roadmap
- Stay current with emerging vulnerabilities, exploitation techniques and defensive countermeasures
What you'll bring
- 5+ years of hands-on penetration testing or red team experience
- Deep knowledge of network and application security, Active Directory and common cloud platforms (Azure, AWS)
- Industry certifications such as OSCP, OSWE, CRTP or equivalent practical demonstration of skill
- Strong report writing and client communication skills
- Ability to obtain and maintain an Australian Government security clearance (NV1 preferred)
- Australian citizenship or permanent residency (clearance requirement for government engagements)
Nice to have
- Experience with SAST/DAST code review and secure development practices
- OT/ICS or SCADA assessment experience
- Published research, CVEs, or conference presentations