Penetration Tester

Kinetic IT; Canberra; On-site; AUD 120,000 - 180,000; Full time

Job summary

Kinetic IT in Canberra is seeking a technically skilled Penetration Tester to perform offensive security assessments across infrastructure, AD, cloud, web apps and SaaS, from scoping through reporting. You’ll contribute to testing methodologies, tools and reporting standards within a collaborative Cyber Security practice.

Join a team that values professional growth, customer-focused delivery, and high-quality technical reporting for both technical and non-technical stakeholders.

Qualifications

• Experience in a cyber security consultancy, professional services or advisory environment.
• Proven experience independently delivering and reporting penetration testing engagements.
• Strong understanding of enterprise networking, Active Directory and hybrid identity.
• Experience across infrastructure, cloud, web applications and SaaS assessments.
• Knowledge of Microsoft Azure, Microsoft 365 and MITRE ATT&CK.
• Familiarity with tools such as Nmap, Burp Suite, Metasploit, Wireshark, and Kali Linux.
• Basic understanding of networking, operating systems, and web application security.
• Experience writing technical reports and communicating findings.
• Red Team, Purple Team or adversary simulation experience is highly desirable.
• Strong customer-facing, communication and report-writing skills.
• Ability to work autonomously, manage competing priorities and operate in a professional services environment.
• OSCP, eJPT, PNPT or CRTP highly desirable.
• Baseline clearance, or ability to obtain, desirable.

Responsibilities

• Scope and deliver penetration testing engagements across multiple customers.
• Conduct assessments across network infrastructure, Active Directory, hybrid identity, cloud, web applications and SaaS.
• Identify vulnerabilities, attack paths and security weaknesses and assess their business impact.
• Produce clear technical reports with practical remediation recommendations.
• Present findings to technical and non-technical stakeholders.
• Manage multiple engagements and competing priorities.
• Contribute to testing methodologies, tools and reporting standards.
• Support the ongoing development of the Cyber Security practice and share knowledge across the team.

Skills

Penetration testing

Cyber security consultancy experience

Independent engagement delivery

Technical reporting

Client-facing communication

Tools

Nmap

Burp Suite

Metasploit

Wireshark

Kali Linux

Job description

About The Role

We're looking for a technically skilled Penetration Tester to work within our Professional Services portfolio. You'll execute offensive security assessments to identify vulnerabilities, demonstrate realistic attack paths and help improve the security posture of client environments.

You’ll deliver penetration testing engagements across infrastructure, Active Directory, cloud, web applications and SaaS platforms, taking ownership from scoping and testing through to reporting and presenting findings.

You’ll also contribute to the development of testing methodologies, tools and reporting standards, while working as part of a collaborative, high-performing team. This is an opportunity for someone passionate about cyber security who wants to continue developing their technical and consulting capability.

Responsibilities will include

• Scope and deliver penetration testing engagements across multiple customers.
• Conduct assessments across network infrastructure, Active Directory, hybrid identity, cloud, web applications and SaaS.
• Identify vulnerabilities, attack paths and security weaknesses and assess their business impact.
• Produce clear technical reports with practical remediation recommendations.
• Present findings to technical and non-technical stakeholders.
• Manage multiple engagements and competing priorities.
• Contribute to testing methodologies, tools and reporting standards.
• Support the ongoing development of the Cyber Security practice and share knowledge across the team.

What you'll bring to the table

• Experience in a cyber security consultancy, professional services or advisory environment.
• Proven experience independently delivering and reporting penetration testing engagements.
• Strong understanding of enterprise networking, Active Directory and hybrid identity.
• Experience across infrastructure, cloud, web applications and SaaS assessments.
• Knowledge of Microsoft Azure, Microsoft 365 and MITRE ATT&CK.
• Familiarity with tools such as Nmap, Burp Suite, Metasploit, Wireshark, and Kali Linux.
• Basic understanding of networking, operating systems, and web application security.
• Experience writing technical reports and communicating findings.
• Red Team, Purple Team or adversary simulation experience is highly desirable.
• Strong customer-facing, communication and report-writing skills.
• Ability to work autonomously, manage competing priorities and operate in a professional services environment.
• OSCP, eJPT, PNPT or CRTP highly desirable.
• Baseline clearance, or ability to obtain, desirable.

About Kinetic IT

Kinetic IT is a leading Australian IT services provider specialising in Intelligent Workplace, Cloud, Cyber Security, Digital Infrastructure and IT Service Management. We are unlocking the potential of technology to enrich lives of Australian communities.

For more than 25 years, we've partnered with some of Australia's most important organisations, helping them deliver essential services relied upon by our communities including government, critical infrastructure, education, law enforcement, defence, emergency services, utilities, and transport.

Be You, Create the Future

At Kinetic IT, we're driven by a shared passion for technology, customer success, and community impact.

With over 1,500 talented people working across Australia, we deliver world-class capabilities with a local touch - helping shape the future of tech, here and beyond.

We value individuality and foster an inclusive culture where you're safe to be your best, real self. We tackle challenges together, celebrate success together, and make sure everyone feels valued, supported, and proud of the work they do.

As an equal opportunity employer, we welcome people of all abilities, backgrounds, cultures, and genders. We're proud to be an Indigenous and Veteran-friendly employer.

The Kinetic IT Difference

• Growth-focused culture - Formal training, mentoring, vendor exam support, communities of practice and regular development reviews.
• Advance your career - Access new roles via our internal 'Opportunity Marketplace' careers hub.
• Flex your work - Hybrid options, flexible hours, mobility and part-time roles (customer needs permitting).
• Celebrate together - Social events, cultural celebrations, end-of-year functions and more.
• Wellbeing matters - Health and wellness resources, tailored leave and support options and EAP access.
• Other Perks- Access to our employee discounts platform, discounted gym membership and more.

#hybrid