Penetration Tester / Security Consultant

The Decipher Bureau; Sydney; Remote; AUD 135,000 - 165,000; Full time

Benefits offered by this job

Remote-friendly working with no mand.

Training and certifications support

Conference attendance

Competitive package up to $150K

Job summary

Decipher Bureau is seeking mid-level Penetration Tester to join a growing offensive security team in Australia. This hands-on technical consulting role delivers testing engagements for clients across industries, identifies the issues that matter, and explains practical remediation.

You’ll work with a large, experienced team of testers, with support to learn, get certified, and attend security conferences. There is no set office-days policy; plenty of the team work remotely, with some client

Qualifications

• 3-5 years' hands-on experience as a Penetration Tester or Security Consultant.
• Solid web application and infrastructure testing experience.
• Full working rights in Australia and East Coast base (Sydney preferred).

Responsibilities

• Deliver penetration tests across internal and external infrastructure, web applications, databases, mobile and wireless.
• Run vulnerability assessments (internal, external, web application and database).
• Contribute to red team attack simulations.
• Carry out firewall and password audits, SOE security assessments and source code reviews.
• Support security risk (ISO 27001) and privacy impact (APP) assessments.
• Write clear, practical reports and talk clients through findings, risk and remediation options.
• Use scripting and automation to make your testing more efficient.
• Keep up with emerging threats, techniques and tooling through ongoing research and development.

Skills

Penetration testing

Web application testing

Infrastructure testing

Tools

Python

PowerShell

Bash

Job description

Penetration Tester / Security Consultant

We're partnering with one of Australia's most awarded IT and cyber security providers, now backed by a global technology group. They've been helping organisations stay secure for over 20 years, and their offensive security practice is growing. They're looking for mid-level Penetration Testers to join the team. This is a hands-on technical consulting role. You'll deliver testing engagements for clients across a range of industries, find the issues that matter, and explain clearly how to fix them. You'll work alongside a big, experienced team of testers, with genuine support to keep learning, get certified and get along to security conferences.

There's no set office-days policy. Plenty of the team work most of the time remotely, although some client engagements may call for more time on site.

What's on offer

• Package up to $150K, depending on experience
• Flexible, remote-friendly working with no mandated office days
• A large, highly skilled offensive security team (25+ OSCP-certified consultants) that’s generous with knowledge
• Support for further training, certifications and attending security conferences
• Variety: a broad mix of engagement types and client industries, including financial services

What you'll be doing

• Deliver penetration tests across internal and external infrastructure, web applications, databases, mobile and wireless
• Run vulnerability assessments (internal, external, web application and database)
• Contribute to red team attack simulations
• Carry out firewall and password audits, SOE security assessments and source code reviews
• Support security risk (ISO 27001) and privacy impact (APP) assessments
• Write clear, practical reports and talk clients through findings, risk and remediation options
• Use scripting and automation to make your testing more efficient
• Keep up with emerging threats, techniques and tooling through ongoing research and development

What you'll bring

Must-have:

• Around 3-5 years' hands-on experience as a Penetration Tester or Security Consultant
• Solid web application and infrastructure (internal/external) testing experience

Desirable:

• A recognised penetration testing certification such as OSCP, OSCE or CREST (strongly preferred)
• Red team or adversary simulation experience
• Experience testing for financial services clients
• Scripting/programming skills for testing and automation (e.g. Python, PowerShell, Bash)
• Mobile, wireless or source code review experience
• Any CVEs or 0days attributed to you
• A current NV1 or NV2 security clearance, or Defence Force experience

Essential requirement

Candidates must have full working rights in Australia and be based on the East Coast (Sydney preferred).

About Decipher Bureau

Decipher Bureau is Australia's leading cyber security recruitment specialist, partnering with organisations across government, critical infrastructure and enterprise to find and secure exceptional talent. We don't just match skills to a job description. We take the time to understand the technical demands of a role and whether a candidate will genuinely thrive in the team. Because the right placement beats a quick one, every time.