Penetration Tester

HackLabs; Sydney; On-site; AUD 100,000 - 150,000; Full time

Job summary

HackLabs is an Australian information security consultancy known for offensive security expertise. The Penetration Tester will conduct sophisticated security assessments that mimic real-world adversaries, covering web, mobile, and network environments.

The role requires delivering high-quality reports, collaborating with stakeholders, and developing HackLabs' proprietary methodologies to stay at the forefront of the industry.

Qualifications

• Experience in penetration testing and/or red teaming.
• Expertise in Web, Mobile, or Internal/External Network testing.
• Strong knowledge of OWASP, MITRE ATT&CK, and NIST.
• Excellent written and verbal communication for stakeholders.

Responsibilities

• Plan, scope and execute advanced penetration tests across diverse environments.
• Test Web, API, and Mobile applications for security weaknesses.
• Perform External and Internal Network Penetration Testing.
• Conduct Wireless Network Security Assessments and Adversary Simulation/Red Team engagements.
• Identify, exploit, and pivot from vulnerabilities to assess impact.
• Create clear, high-quality reports with remediation guidance for technical and executive audiences.
• Contribute to HackLabs' testing methodologies and toolsets.

Skills

Penetration testing

Red teaming

Web testing

Mobile testing

Tools

Burp Suite

Metasploit

Nmap

Kali Linux

Job description

About HackLabs

HackLabs is a leading, CREST-accredited Australian information security consultancy dedicated to delivering superior offensive security services. We are a boutique firm known for our cutting‑edge expertise in Penetration Testing, Social Engineering, and Red Teaming for clients across various sectors. Our commitment to innovation, high‑quality results, and deep technical proficiency sets us apart in the Australian cybersecurity landscape.

Role: Penetration Tester

As a Penetration Tester at HackLabs, you will be a critical part of our offensive security team, responsible for conducting sophisticated and rigorous security assessments designed to mimic the actions of real‑world adversaries.

Key Responsibilities

• Manage Complex Assessments: Plan, scope, and execute advanced penetration tests across a wide range of environments, including:
• Web, API, and Mobile Application Security Testing
• External and Internal Network Penetration Testing.
• Wireless Network Security Assessments.
• Adversary Simulation and Red Team Engagements.
• Exploitation and Post‑Exploitation: Successfully identify, exploit, and pivot from sophisticated vulnerabilities to determine the maximum achievable impact and information exposure.
• Reporting and Client Communication: Prepare clear, detailed, and high‑quality technical reports that outline vulnerabilities, exploitation scenarios, and provide practical, strategic remediation advice for both technical and executive audiences.
• Methodology Development: Contribute to the refinement and development of HackLabs' proprietary testing methodologies and toolsets, ensuring we remain on the forefront of the industry.

Required Skills and Experience

• Experience in penetration testing and/or red teaming.
• Demonstrable expertise in Web Application, Mobile Application, or Internal/External Network Penetration Testing.
• Strong practical knowledge of industry frameworks and standards (e.g., OWASP, MITRE ATT&CK, NIST).
• Expert proficiency in common security tools (e.g., Burp Suite Professional, Metasploit, Nmap, Kali Linux tools).
• Excellent written and verbal communication skills, with a proven ability to present complex technical findings to non‑technical stakeholders.

Why Join HackLabs?

HackLabs offers a unique and highly rewarding environment for elite cybersecurity professionals:

• Be on the Cutting Edge: We are committed to continuous learning and innovation, investing significantly in research and development. You'll be using and creating the most advanced techniques and tools, staying ahead of ever‑evolving attacker tactics.
• High‑Impact, Challenging Work: As a boutique firm, you will be deeply involved in complex, high‑value engagements across a diverse client base, including external networks, wireless infrastructure, mobile applications, and advanced social engineering assessments.
• Expert and Certified Team: Work alongside security experts who hold prestigious certifications like CREST CRT, OSCP, and OSCE. Our culture is built on sharing knowledge, mentorship, and technical excellence.
• Commitment to Quality: We adhere to the highest industry standards and rigorous methodologies (OWASP Top 10, SANS CWE Top 25, NIST SP 800‑115) ensuring reliable, high‑quality, and transparent results for our clients.