Associate Security Consultant

Showtime Consulting Pty Ltd; Sydney; On-site; AUD 81,000 - 104,000; Full time

Benefits offered by this job

Discounted purchases

Udemy courses

Global organization

Job summary

Harvey Norman is seeking a Consultant – Cybersecurity to join our onsite cybersecurity team in Sydney. You will work with security leaders to deliver incident response, offensive security engagements, and risk assessments across enterprise environments.

This role combines hands-on security testing with forensics, requires OSCP-like certification, and experience with cloud platforms (AWS, Azure, GCP). You will report to the Cyber Security Assurance Manager and collaborate with vendors and

Qualifications

• 6+ months of full-time professional experience in offensive security, incident response or a relevant cybersecurity domain (consulting experience preferred).
• Certifications: OSCP or similar (offensive or defensive).
• Strong understanding of Windows and Linux operating systems and cloud environments (AWS/Azure/GCP).
• Experience translating technical findings into concise reports for senior stakeholders.

Responsibilities

• Conduct Information Security Assurance reviews across business and technology initiatives.
• Coordinate security assessments including vulnerability assessments, configuration reviews, and external testing.
• Review findings with project teams and vendors to ensure remediation or acceptance.
• Support third-party risk assessments and risk-based decision making.
• Contribute to the maturity of the information security assurance function.

Skills

Incident Response

Penetration Testing

Threat Hunting

Cloud Security (AWS/Azure/GCP)

Scripting (Python, PowerShell, Bash)

Active Directory

OSCP Certification

Tools

AWS

Azure

GCP

Active Directory

Job description

What Associate Security Consultant Jobs are i...

Showing 3042 Associate Security Consultant jobs in Sydney

Thank you for your feedback

Your input helps us improve our service.

Consultant, Cybersecurity

2000 Sydney FTI Consulting

Posted today

Job Viewed

Tap Again To Close

Job Description

Who We Are

FTI Consulting is the leading global expert firm for organizations facing crisis and transformation. We work with many of the world’s top multinational corporations, law firms, banks and private equity firms on their most important issues to deliver impact that makes a difference. From resolving disputes, navigating crises, managing risk and optimizing performance, our teams respond rapidly to dynamic and complex situations.

At FTI Consulting, you’ll work side-by side with leaders who have shaped history, helping solve the biggest challenges making headlines today. From day one, you’ll be an integral part of a focused team where you can make a real impact. You’ll be surrounded by an open, collaborative culture that embraces diversity, recognition, professional development and, most importantly, you.

Are you ready to make your impact?

About The Role

FTI Consulting is the leading global expert firm for organisations facing crisis, transformation and moments of truth. The Cybersecurity Practice within FTI Consulting is a leading provider of independent cyber and risk management advisory services with a core offering focused on (but not limited to) Cyber Readiness, Incident Response, Offensive Security, and Complex Investigations & Litigation.

We are seeking to appoint a Consultant – Cybersecurity (Incident Response & Offensive Security) to our cybersecurity practice in Sydney. This is a full-time role offering excellent career opportunities and professional development for future progression within the firm. This is a high-impact consulting role suited to a cybersecurity professional who wants to work across both incident response and offensive security engagements, contributing to complex, high-stakes client matters. We are seeking candidates who want to work on either offensive security only, incident response only, or a combination of both.

What You’ll Do

Work with clients to provide strategic and tactical advice that enhances their cybersecurity posture across both reactive and proactive engagements:

Incident Response & Investigations

• Respond to complex cyber incidents, including ransomware, data breaches, malware infections, email compromises, insider threats, and other security breaches experienced by our clients.
• Conduct in-depth investigations on various platforms and devices to identify the extent of compromise and potential threat actors.
• Rapidly assess incoming incidents, coordinating with internal teams and clients to implement containment strategies and mitigate potential damages.
• Utilise security tools, software, and methodologies to gather and analyse digital evidence, reconstruct incident timelines, and produce detailed assessments.
• Generate clear and concise reports documenting investigative findings, analysis results, and recommended remediation actions .
• Work closely with cross-functional teams, including Cybersecurity, Forensics, Legal and IT teams, to ensure well-rounded incident response efforts.

Offensive Security

• Deliver penetration testing across corporate networks, cloud environments, and applications.
• Execute adversary simulation activities aligned to contemporary threat actor TTPs.
• Safely conduct exploitation, post-exploitation, and attack path analysis in enterprise environments.
• Assess security controls and detection capability from an attacker’s perspective.
• Translate technical findings into concise and approachable language for senior stakeholders.
• Produce high-quality reports suitable for executive, regulatory, and litigation use.

Broader Responsibilities

• Assist with and contribute to scoping discussions for cybersecurity engagements.
• Support cyber incident response matters through attacker-centric analysis.
• Support proposals, client presentations, and business development activity.
• Stay current with the latest cyber threats, attack techniques, vulnerabilities, and threat actor trends.
• Collaborate with multidisciplinary teams to deliver high-quality client outcomes.

How You’ll Grow

This is an excellent opportunity for a person with proven, hands-on cybersecurity experience to join a dynamic and growing cybersecurity team. With the ever-evolving cybersecurity landscape, the need for continuous professional development remains at the forefront and is fully supported. You will gain exposure to both incident response and offensive security engagements, working alongside experienced practitioners on high-profile matters. We are committed to investing in your development through on-the-job learning, mentoring, and professional certifications.

What You Will Need to Succeed

Unrestricted working rights

6+ months of full-time professional experience in offensive security, incident response or a relevant and adjacent cybersecurity domain (consulting experience is preferred).

A keen interest in cybersecurity, across either offensive or defensive domains, with a desire to progress a career within an international cybersecurity consultancy.

Hands-on cybersecurity experience in incident response, threat hunting, penetration testing, or similar areas.

Ability to work with senior team members and clients to solve complex cybersecurity scenarios, including during crisis situations.

A strong work ethic, integrity, and a high level of professionalism.

Certifications: OSCP or similar (offensive or defensive security)

Strong understanding of: Windows and Linux operating systems

Exploits, vulnerabilities, intrusion vectors, and malware

Enterprise environments, including AWS, Azure (including Microsoft 365), and/or GCP

Tactics, techniques, and procedures (TTPs) commonly employed by threat actors

Strong written and verbal communication skills, with the ability to produce clear and concise reports.

Scripting and automation skills (e.g. Python, PowerShell, Bash).

Experience with Active Directory, identity-focused attacks, or cloud security testing.

Understanding of enterprise incident management and response processes.

FTI Consulting acknowledges that we stand on the lands of the First Nations peoplesand would like to pay our respects to Elders past and present. We extend solidarity and hope for a future where all are afforded justice, dignity and peace.

FTI Consulting is an equal opportunity employer and does not discriminate on the basis of race, color, national origin, ancestry, citizenship status, protected veteran status, religion, physical or mental disability, marital status, sex, sexual orientation, gender identity or expression, age, or any other basis protected by law, ordinance, or regulation.

Compensation Minimum Pay: $80,500 Maximum Pay: $104,000 Compensation Disclosure: The compensation range reflects potential base salary for the role and is inclusive of Superannuation. Determination of actual salary is based on a combination of relevant factors such as market considerations, business needs, and an individual’s location, skills, level of experience and qualifications.

• Opportunities to make discounted purchases on a great range of products.
• Access to Udemy an online training platform with over 5,500 courses.
• Experience working within a diverse, unique, and successful global organisation.

As one of Australia’s largest retailers of lifestyle products, with more than 300 complexes worldwide, Harvey Norman® has been a part of almost every Australian’s shopping experience. Whether getting the latest electronic gadgets, or furnishing your first home, Harvey Norman® is the place where you can shop with confidence.

About the role

Reporting to the Cyber Security Assurance Manager and based onsite at the Silverwater Corporate Office, you will work closely with security leaders, project teams, solution architects, business stakeholders and vendors to embed security-by-design principles across business and technology initiatives. Acting as a trusted security advisor, you will assess proposed solutions, identify security risks and recommend practical controls that support secure business outcomes.

This role will involve conducting security and third-party risk assessments, reviewing solution designs, coordinating security testing and managing identified risks through to remediation or formal acceptance. You will also contribute to improving the organisation’s information security assurance frameworks, processes and standards.

You will

• Conduct Information Security Assurance reviews across business and technology initiatives, ensuring security-by-design principles are embedded throughout the project lifecycle from initiation through to implementation and closure.
• Develop, maintain and communicate security requirements, assessment criteria, standards and assurance guidance to support the consistent application of security controls across projects and third-party engagements.
• Partner with solution architects, project teams, business stakeholders and vendors to identify security risks, assess potential business impact and recommend pragmatic security controls and risk treatment options.
• Perform Third Party Risk Assessments (TPRA) of vendors, products and services, including the review of security questionnaires, certifications, audit reports and supporting evidence to support informed risk-based decision-making.
• Review solution architectures, designs, integrations, data flows and technology implementations to ensure alignment with organisational security requirements, standards and industry best practices.
• Coordinate and perform security assessment activities including vulnerability assessments, security configuration reviews, web application security testing, external penetration testing engagements etc.
• Review security assessment findings and work with project teams, vendors and stakeholders to ensure identified vulnerabilities, weaknesses and security risks are appropriately remediated or formally accepted.
• Perform Information Security Risk Assessments (ISRA) for projects, technology implementations and business initiatives in accordance with Harvey Norman's risk management framework.
• Document, track, monitor and escalate identified security risks through established governance processes, ensuring remediation activities, mitigation plans and risk acceptance decisions are managed through to closure.
• Contribute to the continuous improvement and maturity of the Information Security Assurance function through the adoption of industry best practices and enhancement of assurance methodologies, templates and processes.

About you

You are a proactive cyber security professional who can balance security requirements with business needs and provide practical, risk-based advice to stakeholders. With strong analytical skills, sound judgement and attention to detail, you take a risk-based approach and remain current with emerging cyber threats, technologies and industry practices.