Penetration Tester / Security Consultant

Salary: $150,000 Package

We're partnering with one of Australia's most awarded IT and cyber security providers, now backed by a global technology group. They've been helping organisations stay secure for over 20 years, and their offensive security practice is growing. They're looking for mid-level Penetration Testers to join the team.
This is a hands-on technical consulting role. You'll deliver testing engagements for clients across a range of industries, find the issues that matter, and explain clearly how to fix them. You'll work alongside a big, experienced team of testers, with genuine support to keep learning, get certified and get along to security conferences.

There's no set office-days policy. Plenty of the team work most of the time remotely, although some client engagements may call for more time on site.

What's on offer

• Package up to $150K, depending on experience
• Flexible, remote-friendly working with no mandated office days
• A large, highly skilled offensive security team (25+ OSCP-certified consultants) that's generous with knowledge
• Support for further training, certifications and attending security conferences
• Variety: a broad mix of engagement types and client industries, including financial services

What you'll be doing

• Deliver penetration tests across internal and external infrastructure, web applications, databases, mobile and wireless
• Run vulnerability assessments (internal, external, web application and database)
• Contribute to red team attack simulations
• Carry out firewall and password audits, SOE security assessments and source code reviews
• Support security risk (ISO 27001) and privacy impact (APP) assessments
• Write clear, practical reports and talk clients through findings, risk and remediation options
• Use scripting and automation to make your testing more efficient
• Keep up with emerging threats, techniques and tooling through ongoing research and development

What you'll bring

Must-have:

• Around 3-5 years' hands-on experience as a Penetration Tester or Security Consultant
• Solid web application and infrastructure (internal/external) testing experience
• A proven track record delivering security testing engagements end to end, including reporting
• The ability to explain findings and recommend practical remediation or mitigation
• Comfortable working autonomously as well as part of a team

Desirable:

• A recognised penetration testing certification such as OSCP, OSCE or CREST (strongly preferred)
• Red team or adversary simulation experience
• Experience testing for financial services clients
• Scripting/programming skills for testing and automation (e.g. Python, PowerShell, Bash)
• Mobile, wireless or source code review experience
• Any CVEs or 0days attributed to you
• A current NV1 or NV2 security clearance, or Defence Force experience

Essential requirement
Candidates must have full working rights in Australia and be based on the East Coast (Sydney preferred).

About Decipher Bureau
Decipher Bureau is Australia's leading cyber security recruitment specialist, partnering with organisations across government, critical infrastructure and enterprise to find and secure exceptional talent. We don't just match skills to a job description. We take the time to understand the technical demands of a role and whether a candidate will genuinely thrive in the team. Because the right placement beats a quick one, every time.

Interested?
Reach out for a confidential chat:

• Anthony Buccat | 0452 415 858
• abuccat@decipherbureau.com