Penetration Tester

Triskele Labs; Melbourne; Hybrid; AUD 100,000 - 160,000; Full time

Job summary

Triskele Labs is seeking a Penetration Tester for a full-time hybrid role with flexible remote work in Australia. You will assess web applications, networks, cloud environments, and infrastructure to identify vulnerabilities and validate controls.

Responsibilities include planning tests, documenting findings, and presenting remediation guidance to both technical and non-technical stakeholders. Collaboration with red team, SOC, and consulting teams is essential for continuous improvement of tools

Qualifications

• Degree or diploma in Information Security, Computer Science, or related field, or relevant certifications.
• Strong written and verbal communication with the ability to explain complex issues clearly.
• Experience conducting web app, network, and cloud assessments and reporting findings.
• Familiarity with common attack vectors, security controls, and vulnerability remediation.

Responsibilities

• Plan and execute penetration tests across web apps, networks, cloud, and infrastructure.
• Document technical findings and produce clear, actionable reports.
• Present results and remediation guidance to technical and non-technical stakeholders.
• Collaborate with red team, SOC, and consulting colleagues to improve tools and methodologies.
• Stay current with emerging threats and security trends and contribute to knowledge sharing.

Skills

Cybersecurity

Application Security

Red Teaming

Analytical Thinking

Communication

Team Collaboration

Education

InfoSec degree

Security certifications (OSCP/OSCE/GWAPT/GPEN)

Tools

Burp Suite

Nmap

Metasploit

Kali Linux

OSINT tools

Job description

Company Description

Triskele Labs is one of Australia’s fastest growing cybersecurity companies, providing a complete suite of services from penetration testing, compliance, and risk management to 24x7x365 security operations and cybersecurity management. The team leverages advanced threat intelligence to deliver high-quality, professional security services tailored to client needs. Triskele Labs focuses on demystifying cybersecurity through customised programs that align with organisational goals and budgets. With a holistic approach, the company delivers multi-point security solutions that protect IT infrastructure against global threats. Honesty, integrity, passion, and a commitment to robust outcomes underpin the company’s culture and client partnerships.

Role Description

The Penetration Tester role at Triskele Labs is a full-time hybrid position with flexibility for remote work. In this role, our Penetration Testers conduct security assessments of web applications, networks, cloud environments, and infrastructure to identify vulnerabilities and validate security controls. Responsibilities include planning and executing penetration tests, documenting technical findings, producing clear reports, and presenting results and remediation guidance to both technical and non-technical stakeholders. The Penetration Tester will collaborate with red team, security operations, and consulting colleagues to support broader cybersecurity engagements and contribute to continuous improvement of tools, methodologies, and internal knowledge. The role may also involve developing proof-of-concept exploits, assisting with incident response activities, and staying current with emerging threats, vulnerabilities, and security trends.

Qualifications

• Candidates should possess strong skills in Cybersecurity, including knowledge of common attack vectors, security frameworks, and defensive controls.
• Candidates should possess skills in Application Security and Red Teaming, with experience assessing web, mobile, APIs, and performing simulated offensive operations.
• Candidates should possess skills in Reverse Engineering and Malware Analysis, including the ability to analyse binaries, scripts, and malicious code to understand behavior and impact.
• Candidates should possess experience with penetration testing tools and methodologies (e.g., Burp Suite, Nmap, Metasploit, Kali Linux, OSINT tools) and reporting best practices.
• Relevant qualifications such as a degree or diploma in Information Security, Computer Science, or related fields, or industry certifications (e.g., OSCP, OSCE, GWAPT, GPEN) are highly beneficial.
• Strong analytical and problem-solving abilities, clear written and verbal communication skills, and the capacity to explain complex technical issues in accessible language are required.
• Ability to work collaboratively in a team, manage multiple projects, maintain confidentiality, and demonstrate a customer-focused, integrity-driven approach to security engagements.