Principal Penetration Tester

Decipher Bureau; Sydney; Hybrid; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid flexibility

Meal allowances

Team activities

Above-market compensation

Job summary

Decipher Bureau in Sydney seeks a Senior Principal Penetration Tester to lead offensive security engagements end-to-end. You will think in attack paths, chain weaknesses together, and mentor other team members, with hybrid flexibility and Australia-wide consideration for the right candidate.

The role emphasizes building tooling and setting technical standards, becoming a trusted technical voice for clients across enterprise engagements.

Qualifications

• Proven experience in leading offensive security engagements and thinking like an attacker.
• Ability to design and build custom tools to sharpen engagement workflows.
• Strong communication skills across technical and non-technical audiences.

Responsibilities

• Lead offensive security engagements end-to-end.
• Think beyond single vulnerabilities to full attack chains.
• Set technical standards and mentor others on the team.
• Build tooling to sharpen how engagements are run.
• Be a trusted technical voice for clients.

Skills

Offensive security

Tooling development

Clear communication

Tools

Python scripting

PowerShell

Job description

Most security roles want you to find vulnerabilities.

This one wants you to think like the attacker who chained them together.

We're looking for a senior offensive security professional to lead engagements - someone with the depth of a researcher and the judgment of someone who's done this long enough to know where scanners stop being useful.

Principal Penetration Tester

Most security roles want you to find vulnerabilities.

This one wants you to think like the attacker who chained them together.

We're looking for a senior offensive security professional to lead engagements - someone with the depth of a researcher and the judgment of someone who's done this long enough to know where scanners stop being useful.

About the Company

A highly technical Australian team doing adversarial work with enterprise clients in Australia and globally. Varied engagements, genuine technical autonomy, and competitive compensation. They value how you think, not just what you've tested.

About You

You're an analytical problem-solver with a natural curiosity for how systems really break. You think in attack paths, chain weaknesses together, and ask "what would an attacker actually do next?" You're comfortable setting that standard for others, not just following it.

Ideally based in Sydney - but for the right level of seniority and expertise, remote within Australia may be considered.

What You'll Do

• Lead offensive security engagements end-to-end
• Think beyond single vulnerabilities to full attack chains
• Set technical standards and mentor others
• Build tooling to sharpen how engagements are run
• Be a trusted technical voice for clients

What You'll Need

• A strong offensive security background, with demonstrated experience
• Solid technical fundamentals and the ability to build your own tools
• Strong communication skills across technical and non-technical audiences

Titles and certifications matter less here - it's how you think and how you approach problems.

Why Join?

• Real influence over methodology and tooling, not just execution
• Varied, meaningful work with no cookie-cutter testing
• A highly technical, collaborative team
• Hybrid flexibility, meal allowances, fun team activities
• Above-market compensation and strong benefits

How to Apply

Click Apply or send your CV to ***email_hidden*** for a 100% confidential, informal conversation. Your privacy will be fully respected.

Be careful - Don’t provide your bank or credit card details when applying for jobs. Don't transfer any money or complete suspicious online surveys. If you see something suspicious, report this job ad .