Penetration Tester

AI Talent; Sydney; Hybrid; AUD 70,000 - 120,000; Full time

Benefits offered by this job

Hybrid work options

Professional development budget

Flexible schedule

Job summary

AI Talent is seeking a skilled Penetration Tester to join our cybersecurity team. You will design and execute tests across networks, web apps, cloud environments, and internal infrastructure, delivering actionable insights to strengthen security.

You will conduct adversary simulations, assess vulnerabilities, and communicate risk with clear remediation guidance to both technical and non-technical stakeholders. Hybrid work options are available.

Qualifications

• Experience in penetration testing or offensive security roles.
• Knowledge of OWASP Top 10, MITRE ATT&CK, CVEs and CVSS.
• Ability to communicate findings clearly to technical and non-technical audiences.

Responsibilities

• Design and execute penetration testing engagements across networks, web apps, cloud, and internal infra.
• Develop test cases from risk analyses and threat intel.
• Produce testing packs and reports with clear risk ratings and remediation guidance.
• Conduct red team exercises and threat emulation to validate security controls.
• Perform social engineering assessments to evaluate security awareness.

Skills

Penetration testing

Ethical hacking

Report writing

Analytical thinking

Independent worker

Team collaboration

Tools

Metasploit

Burp Suite

Nmap

Nessus

Cobalt Strike

Job description

Job Type: Permanent position | Full time position

Job Description

Penetration Tester

Position Overview We are looking for a skilled and driven Penetration Tester to join our cybersecurity team and play a critical role in identifying and addressing vulnerabilities across our systems, networks, and applications. In this role, you will design and execute comprehensive penetration testing engagements, simulate real-world cyber threats, and deliver actionable insights that strengthen our security posture.

Key Responsibilities

• Develop, plan, and execute penetration testing methodologies across networks, web applications, cloud environments, and internal infrastructure to uncover security weaknesses before they can be exploited
• Design detailed test cases through in-depth technical analysis of risks, common vulnerability patterns, and threat intelligence relevant to the organisation's environment
• Produce comprehensive test scripts, materials, and testing packs to evaluate both new and existing software, services, and systems for security vulnerabilities
• Plan and conduct cyber threat emulation activities — including adversary simulation and red team exercises — to validate the effectiveness of technical security controls and identify gaps in defences
• Identify exploitable vulnerabilities and map potential attack vectors into systems, analysing scan results and manual findings to assess the severity and risk of security loopholes
• Carry out social engineering assessments, including simulated phishing campaigns, to evaluate the effectiveness of security awareness programmes and staff resilience to human-focused threats
• Perform thorough post-engagement analysis and produce clear, well-structured reports that communicate technical findings and risk ratings to both technical teams and senior stakeholders
• Provide prioritised, practical remediation recommendations and work collaboratively with development and infrastructure teams to support the resolution of identified vulnerabilities
• Stay current with emerging attack techniques, exploit research, CVEs, and evolving threat landscapes to ensure testing methodologies remain effective and up to date
• Support certification, accreditation, and compliance activities by providing security assurance testing aligned with relevant frameworks and regulatory requirements
• Contribute to the continuous improvement of internal security testing processes, tooling, and documentation to enhance the team's overall capability and efficiency

Required Qualifications & Skills

• Demonstrated experience in penetration testing, ethical hacking, or a closely related offensive security role
• Proficiency with industry-standard penetration testing tools such as Metasploit, Burp Suite, Nmap, Nessus, Cobalt Strike, or similar
• Strong understanding of network protocols, operating systems (Windows and Linux), web application architectures, and cloud platforms (AWS, Azure, or GCP)
• Practical knowledge of common vulnerability frameworks and standards, including OWASP Top 10, MITRE ATT&CK, CVE, and CVSS
• Experience conducting vulnerability assessments, threat modelling, and risk analysis across varied technical environments
• Ability to write clear, professional reports tailored to both technical and non-technical audiences, articulating findings, risks, and recommended remediation actions
• Solid understanding of security principles, defence-in-depth strategies, and secure development practices
• Relevant industry certification such as OSCP (Offensive Security Certified Professional), CEH, or equivalent
• Strong analytical and critical thinking skills with meticulous attention to detail
• Demonstrated ability to manage multiple engagements simultaneously and work effectively both independently and within a collaborative team environment

Preferred Qualifications

• Advanced certifications such as OSCE, OSEP, GPEN, GWAPT, or CREST-accredited qualifications
• Experience with red team operations, purple team exercises, or adversary simulation engagements
• Familiarity with scripting or programming languages such as Python, Bash, PowerShell, or Ruby for custom tool development and automation
• Exposure to IIS/SCADA, IoT, or operational technology (OT) security testing environments
• Experience working within regulated industries or environments subject to frameworks such as ISO 27001, NIST, or the Australian Government Information Security Manual (ISM)
• Knowledge of cloud-native security testing techniques and containerised environment assessments

Why Join Us?

• Work on technically challenging and varied engagements across diverse industries, giving you genuine breadth of experience and ongoing professional growth
• Access a structured professional development budget to pursue advanced certifications, attend industry conferences, and build on your existing skill set
• Enjoy flexible working arrangements, including hybrid options, that support a healthy work-life balance
• Be part of a collaborative, high-performing security team that values knowledge sharing, innovation, and a strong ethical approach to cybersecurity
• Contribute to meaningful work that directly protects organisations and individuals from real-world cyber threats

Job Details

• Job Type: Full-time, Permanent
• Work Schedule: 8-hour shift
• Salary: $70,000 – $120,000 per year + Super