Penetration Tester / Security Consultant
We're partnering with one of Australia's most awarded IT and cyber security providers, now backed by a global technology group. They've been helping organisations stay secure for over 20 years, and their offensive security practice is growing. They're looking for mid-level Penetration Testers to join the team. This is a hands-on technical consulting role. You'll deliver testing engagements for clients across a range of industries, find the issues that matter, and explain clearly how to fix them. You'll work alongside a big, experienced team of testers, with genuine support to keep learning, get certified and get along to security conferences.
There's no set office-days policy. Plenty of the team work most of the time remotely, although some client engagements may call for more time on site.
What's on offer
- Package up to $150K, depending on experience
- Flexible, remote-friendly working with no mandated office days
- A large, highly skilled offensive security team (25+ OSCP-certified consultants) that’s generous with knowledge
- Support for further training, certifications and attending security conferences
- Variety: a broad mix of engagement types and client industries, including financial services
What you'll be doing
- Deliver penetration tests across internal and external infrastructure, web applications, databases, mobile and wireless
- Run vulnerability assessments (internal, external, web application and database)
- Contribute to red team attack simulations
- Carry out firewall and password audits, SOE security assessments and source code reviews
- Support security risk (ISO 27001) and privacy impact (APP) assessments
- Write clear, practical reports and talk clients through findings, risk and remediation options
- Use scripting and automation to make your testing more efficient
- Keep up with emerging threats, techniques and tooling through ongoing research and development
What you'll bring
Must-have:
- Around 3-5 years' hands-on experience as a Penetration Tester or Security Consultant
- Solid web application and infrastructure (internal/external) testing experience
Desirable:
- A recognised penetration testing certification such as OSCP, OSCE or CREST (strongly preferred)
- Red team or adversary simulation experience
- Experience testing for financial services clients
- Scripting/programming skills for testing and automation (e.g. Python, PowerShell, Bash)
- Mobile, wireless or source code review experience
- Any CVEs or 0days attributed to you
- A current NV1 or NV2 security clearance, or Defence Force experience
Essential requirement
Candidates must have full working rights in Australia and be based on the East Coast (Sydney preferred).
About Decipher Bureau
Decipher Bureau is Australia's leading cyber security recruitment specialist, partnering with organisations across government, critical infrastructure and enterprise to find and secure exceptional talent. We don't just match skills to a job description. We take the time to understand the technical demands of a role and whether a candidate will genuinely thrive in the team. Because the right placement beats a quick one, every time.
#J-18808-Ljbffr
Penetration Tester / Security Consultant in Sydney employer: The Decipher Bureau
The Decipher Bureau is an exceptional employer that prioritises employee growth and development, offering a unique opportunity to work on impactful projects within the not-for-profit health sector. With a flexible hybrid work model based in Geelong, employees enjoy a supportive work culture that fosters collaboration and innovation, while contributing to meaningful security transformations that enhance community health outcomes.
