At a Glance
- Tasks: Conduct penetration testing and identify security vulnerabilities across various environments.
- Company: Join McGrathNicol, a leading independent professional services firm in Cyber.
- Benefits: Enjoy competitive bonuses, extensive training, and flexible leave options.
- Other info: Be part of an inclusive culture that values mentorship and career growth.
- Why this job: Make a real impact in cybersecurity while developing your skills in a supportive environment.
- Qualifications: 3+ years in penetration testing with strong technical and communication skills.
The predicted salary is between 90000 - 110000 $ per year.
Location: Sydney, NSW, AU, 2000
Company: McGrathNicol
Division: Advisory
Department: Cyber
Employment Type: Full Time Permanent
Application Closing Date: 31 December 2026
About Us
McGrathNicol is an independent professional services firm specialising in Cyber, Deals, Forensic, Performance, Restructuring, and Risk & Compliance. For more than 20 years, we have supported organisations to navigate critical moments, from growth and transformation through to financial stress and uncertainty, across the private, public and not-for-profit sectors. Guided by our values – Understanding, Commitment and Impact – we are client-focused, collaborative and committed to creating an environment where our people can do their best work and continue to grow their careers.
The Opportunity
We are seeking a skilled and motivated Senior Analyst - Offensive Security to join our growing team. This role is ideal for someone with a strong hands‑on technical background in offensive security, a passion for identifying vulnerabilities, and an interest in continuing to develop their capability across a broad range of testing disciplines. The successful candidate will also contribute to the development of junior team members by sharing practical knowledge and experience. You will deliver penetration testing engagements across a variety of environments, including infrastructure, web applications, cloud platforms, and operational technology (OT). Working with experienced team members and engagement leaders, you will help clients understand and address security weaknesses to strengthen their security posture and resilience.
Key Responsibilities
- Deliver offensive security engagements, including penetration testing and supporting activities for red team and threat emulation exercises.
- Perform hands‑on testing, analyse technical weaknesses, validate risk, and develop clear, practical remediation recommendations.
- Apply strong working knowledge of enterprise technologies, including Microsoft 365, Azure, AWS, GCP, and hybrid infrastructure, to identify and assess security weaknesses.
- Conduct code reviews as part of application security assessments, identifying vulnerabilities and providing practical secure development guidance.
- Prepare high-quality technical reports and communicate findings clearly to both technical and non-technical stakeholders.
- Collaborate with engagement managers and senior team members to deliver work on time, within scope, and to a consistently high technical and professional standard.
- Support testing preparation, evidence management, and quality assurance activities as required.
- Share knowledge with junior team members and contribute to the continuous improvement of tools, methodologies, and internal guidance.
About You
- At least 3 years of hands‑on penetration testing or closely related offensive security experience.
- Strong knowledge of offensive security methodologies, tools, and frameworks, such as MITRE ATT&CK, OWASP, and NIST.
- Demonstrated hands‑on capability in at least two of the following areas:
- Web application and API testing
- Mobile application testing
- Thick client testing
- Internal and external infrastructure testing
- Cloud security assessments
- Red team operations and adversary simulation
- Experience using scripting and automation to support security testing, such as Python, PowerShell, or Bash.
- Familiarity with OT/ICS environments and protocols is desirable.
- Relevant certifications, such as OSCP, OSWE, CRTP, HackTheBox CPTS, CRTO, CREST CRT, or CREST CCT, are an advantage.
- Strong written and verbal communication skills, including the ability to explain technical findings and remediation actions clearly.
- Ability to work independently, contribute effectively within a team, and manage competing engagement priorities.
Why Join Us?
At McGrathNicol, you’ll thrive in an empowering environment where your expertise drives real impact. We offer a competitive annual bonus program, alongside exceptional training and career development opportunities. Our inclusive culture fosters growth through personalised mentorship. You’ll also benefit from comprehensive support such as 26 weeks parental leave, additional leave options, employee assistance, health and wellbeing programmes, and opportunities for social and community engagement. Join us and be part of a team that values your contributions and supports your success.
Senior Analyst – Penetration Tester in Sydney employer: McGrathNicol
McGrathNicol is an exceptional employer located in the vibrant Brisbane CBD, offering a dynamic work environment where you can thrive as a Forensic Advisory Analyst & Assistant Manager. With a strong emphasis on professional development and a supportive culture, employees are encouraged to grow their skills and advance their careers while engaging in meaningful work that impacts clients positively. The diverse range of projects and collaborative atmosphere make it an ideal place for those seeking a rewarding career in forensic analysis.
