Penetration Tester & Security Consultant (Remote)

Decipher Bureau; Sydney; Remote; AUD 135,000 - 165,000; Full time

Benefits offered by this job

Remote-friendly working with no mand.

Training and certifications support

Conference attendance

Competitive package up to $150K

Job summary

Decipher Bureau is seeking mid-level Penetration Tester to join a growing offensive security team in Australia. This hands-on technical consulting role delivers testing engagements for clients across industries, identifies the issues that matter, and explains practical remediation.

You’ll work with a large, experienced team of testers, with support to learn, get certified, and attend security conferences. There is no set office-days policy; plenty of the team work remotely, with some client

Qualifications

• 3-5 years' hands-on experience as a Penetration Tester or Security Consultant.
• Solid web application and infrastructure testing experience.
• Full working rights in Australia and East Coast base (Sydney preferred).

Responsibilities

• Deliver penetration tests across internal and external infrastructure, web applications, databases, mobile and wireless.
• Run vulnerability assessments (internal, external, web application and database).
• Contribute to red team attack simulations.
• Carry out firewall and password audits, SOE security assessments and source code reviews.
• Support security risk (ISO 27001) and privacy impact (APP) assessments.
• Write clear, practical reports and talk clients through findings, risk and remediation options.
• Use scripting and automation to make your testing more efficient.
• Keep up with emerging threats, techniques and tooling through ongoing research and development.

Skills

Penetration testing

Web application testing

Infrastructure testing

Tools

Python

PowerShell

Bash

Job description

Decipher Bureau is seeking mid-level Penetration Tester to join a growing offensive security team in Australia. This hands-on technical consulting role delivers testing engagements for clients across industries, identifies the issues that matter, and explains practical remediation.

You’ll work with a large, experienced team of testers, with support to learn, get certified, and attend security conferences. There is no set office-days policy; plenty of the team work remotely, with some client