Location: Various locations across Australia (Remote and Onsite opportunities available)
Type: Contract, Permanent, or Subcontractor
Summary
SovereignSourced invites talented Penetration Tester to join our employment register. This register offers access to a diverse range of opportunities across industries such as finance, technology, government, and professional services. While registering your interest doesn’t guarantee immediate placement, it ensures you’re considered for roles aligned with your expertise as they arise.
About the Role
We are seeking an experienced Penetration Tester to conduct security assessments, identify vulnerabilities, and provide remediation strategies to strengthen organisational security posture. This role requires expertise in ethical hacking, penetration testing methodologies, and cyber security frameworks to ensure compliance and resilience against cyber threats.
Salary Range
Salaries for Penetration Tester roles range from $100k-180k inc super.
Key Responsibilities
Conduct penetration testing on networks, web applications, cloud environments, and mobile applications.
Perform red teaming, ethical hacking, and adversary simulation exercises to assess security controls.
Identify, document, and report security vulnerabilities with risk-based remediation recommendations.
Ensure compliance with ISM, PSPF, ASD Essential Eight, ISO 27001, and other security standards.
Develop and execute manual and automated security testing techniques.
Work with security teams to implement secure coding practices and vulnerability management strategies.
Provide technical consulting, threat modelling, and risk assessments to enhance security frameworks.
Support incident response and forensic investigations as needed.
Collaborate with development and IT teams to integrate security improvements.
Stay updated on emerging threats, attack techniques, and security best practices.
Skills and Experience
Active Positive Vetting (PV) security clearance – essential
Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
Proven experience in penetration testing, vulnerability assessment, or ethical hacking roles.
Strong knowledge of OWASP Top 10, MITRE ATTACK, and common attack vectors.
Proficiency in penetration testing tools such as Burp Suite, Metasploit, Nmap, Kali Linux, and Cobalt Strike.
Experience with cloud security testing (AWS, Azure, Google Cloud) and DevSecOps methodologies.
Hands-on experience in web, mobile, network, and cloud security assessments.
Understanding of exploit development, scripting, and security automation.
Strong ability to create technical reports, risk assessments, and vulnerability remediation plans.
Relevant certifications such as OSCP, OSCE, GPEN, CEH, CISSP are highly regarded.
Benefits of Joining
Access to exclusive opportunities with leading organisations in Australia’s most dynamic industries.
Competitive compensation packages tailored to your expertise and engagement type.
Flexible work arrangements to suit your career and lifestyle preferences.
Opportunities to work on high-impact projects that enhance your professional portfolio.
Collaboration with industry leaders and opportunities for ongoing professional development.
Important Note
Joining our employment register means your application will be retained and considered for future opportunities that match your skills and experience. Registering does not guarantee immediate placement but ensures you’re among the first to be considered for relevant roles as they arise.
Bluerydge
Technical Vulnerability Assessor (Defence)
8 days ago
Location: Canberra or Melbourne (onsite)
Type: Full-time
Summary
SovereignSourced connects employers with top talent to help them grow, deliver, and thrive across Australia’s most critical industries.
For this role, we are proud to partner with Bluerydge, an Australian-owned cyber security and technology firm trusted to deliver mission-critical capabilities for major organisations and national security initiatives. Bluerydge drives operational excellence through innovative, reliable, and secure solutions.
Bluerydge is seeking a highly capable Technical Vulnerability Assessor to conduct system assessments, penetration testing, and vulnerability analysis in support of Defence programs. This role plays a critical part in identifying weaknesses in implementation and securing complex ICT environments that underpin national security capability.
About the Role
As a Technical Vulnerability Assessor, you will perform system-level assessments through active and passive scanning, technical validation, and adversarial simulation. You’ll support assurance processes by identifying vulnerabilities, assessing risk impact, and advising on remediation in line with government security requirements.
The role also includes supporting broader cyber risk reporting, documentation, and contributing to the uplift of vulnerability management practices across classified environments.
NOTE: Minimum NV2 Security Clearance is required. TSPV preferred.
Salary Range
Salaries for Technical Vulnerability Assessor (Defence) roles range from $160,000 to $260,000, depending on experience and clearance level.
Key Responsibilities
Conduct technical vulnerability assessments using a range of active and passive methods
Perform penetration testing and exploit simulation on Defence ICT systems
Document and report findings clearly for both technical and executive stakeholders
Engage with stakeholders to advise on vulnerability prioritisation and remediation planning
Contribute to ongoing assessment activities and artefact development
Support artefact management, assurance documentation, and risk analysis as required
Ensure alignment of assessments to applicable frameworks and standards
Skills and Experience
Minimum NV2 Security Clearance (TSPV highly regarded)
Tertiary qualifications in Cyber Security, ICT, or a related field
Proven experience in vulnerability assessment and penetration testing
Familiarity with tools such as Burp Suite, Kali Linux, Nessus, Metasploit, Cobalt Strike, Nmap, and similar
Understanding of the Australian Government Information Security Manual (ISM)
Strong analytical and reporting skills for assessing complex ICT system risk
Experience with risk-based security assessment and remediation
Certifications such as CISSP, CISM, CRISC, GSLC, GSNA, CISA, ISO 27001 Lead Auditor, or PCI QSA are highly regarded
Mindset
Objective and risk-aware, with the ability to deliver clear, defensible assessment outcomes
Committed to high standards of accuracy, documentation, and professional integrity
Works independently and with discretion within classified environments
Capable of strategic thinking while executing technical assessment tasks
Focused on delivering value through secure outcomes, not just compliance
Values clarity, accountability, and disciplined engagement with stakeholders
Benefits of Joining
As an award-winning employer of choice and a high-performing cyber security and technology firm, Bluerydge offers a career experience that is both rewarding and meaningful.
Be part of a trusted delivery team protecting critical capabilities and sensitive systems
Engage directly with technical professionals across leading cyber missions
Receive competitive remuneration and recognition for your contribution
Benefit from professional development, mentoring, and access to specialist tools
Enjoy working in an organisation that prioritises mission alignment, discretion, and results
How to Apply
Please upload your resume to apply or send it to [email protected].
Candidates must be willing to undergo pre-employment screening checks, including verification of ID, work rights, and current security clearance status.
We will contact suitably qualified candidates with further instructions.
For further discussion, please contact:
· Nathalie – 02 6183 6573
· Andi – 02 6183 6568