Senior Analyst - Penetration Tester

McGrathNicol; Sydney; On-site; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Annual bonus

Career development

Parental leave (26 weeks)

Employee assistance programme

Health & wellbeing programs

Social & community engagement

Job summary

McGrathNicol is seeking a Senior Analyst - Offensive Security to lead hands-on penetration testing across infrastructure, web apps, cloud, and OT. You will mentor junior team members while delivering high-quality assessments and practical remediation guidance.

You will apply MITRE ATT&CK, OWASP, and NIST frameworks, work with Azure/AWS/GCP, and communicate complex findings to technical and non-technical stakeholders while upholding professional standards.

Qualifications

• 3+ years hands-on penetration testing or closely related offensive security experience.
• Strong knowledge of offensive security methodologies, tools, and frameworks (MITRE ATT&CK, OWASP, NIST).
• Experience in at least two areas: web/API testing, cloud security assessments, infrastructure testing, red team operations.

Responsibilities

• Deliver offensive security engagements including penetration testing and red team activities.
• Analyze weaknesses, validate risk, and provide remediation recommendations.
• Apply knowledge of enterprise tech (Microsoft 365, Azure, AWS, GCP, hybrid) to assess security gaps.
• Conduct code reviews as part of application security assessments and provide secure development guidance.
• Prepare high-quality technical reports and communicate findings to stakeholders.

Skills

Penetration testing

Threat emulation

Scripting/Automation

Clear communication

Independent work

Education

OSCP/OSWE/CRTP/CCT etc.

Tools

Python

PowerShell

Bash

Job description

Location: Sydney, NSW, AU, 2000

Company: McGrathNicol

Division: Advisory

Department: Cyber

Employment Type: Full Time Permanent

Application Closing Date: 31 December 2026

About Us

McGrathNicol is an independent professional services firm specialising in Cyber, Deals, Forensic, Performance, Restructuring, and Risk & Compliance. For more than 20 years, we have supported organisations to navigate critical moments, from growth and transformation through to financial stress and uncertainty, across the private, public and not-for-profit sectors. Guided by our values – Understanding, Commitment and Impact – we are client-focused, collaborative and committed to creating an environment where our people can do their best work and continue to grow their careers.

The Opportunity

We are seeking a skilled and motivated Senior Analyst - Offensive Security to join our growing team. This role is ideal for someone with a strong hands‑on technical background in offensive security, a passion for identifying vulnerabilities, and an interest in continuing to develop their capability across a broad range of testing disciplines. The successful candidate will also contribute to the development of junior team members by sharing practical knowledge and experience.

You will deliver penetration testing engagements across a variety of environments, including infrastructure, web applications, cloud platforms, and operational technology (OT). Working with experienced team members and engagement leaders, you will help clients understand and address security weaknesses to strengthen their security posture and resilience.

Key Responsibilities

• Deliver offensive security engagements, including penetration testing and supporting activities for red team and threat emulation exercises.
• Perform hands‑on testing, analyse technical weaknesses, validate risk, and develop clear, practical remediation recommendations.
• Apply strong working knowledge of enterprise technologies, including Microsoft 365, Azure, AWS, GCP, and hybrid infrastructure, to identify and assess security weaknesses.
• Conduct code reviews as part of application security assessments, identifying vulnerabilities and providing practical secure development guidance.
• Prepare high-quality technical reports and communicate findings clearly to both technical and non-technical stakeholders.
• Collaborate with engagement managers and senior team members to deliver work on time, within scope, and to a consistently high technical and professional standard.
• Support testing preparation, evidence management, and quality assurance activities as required.
• Share knowledge with junior team members and contribute to the continuous improvement of tools, methodologies, and internal guidance.

About You

• At least 3 years of hands‑on penetration testing or closely related offensive security experience.
• Strong knowledge of offensive security methodologies, tools, and frameworks, such as MITRE ATT&CK, OWASP, and NIST.
• Demonstrated hands‑on capability in at least two of the following areas:
  • Web application and API testing
  • Mobile application testing
  • Thick client testing
  • Internal and external infrastructure testing
  • Cloud security assessments
  • Red team operations and adversary simulation
• Experience using scripting and automation to support security testing, such as Python, PowerShell, or Bash.
• Familiarity with OT/ICS environments and protocols is desirable.
• Relevant certifications, such as OSCP, OSWE, CRTP, HackTheBox CPTS, CRTO, CREST CRT, or CREST CCT, are an advantage.
• Strong written and verbal communication skills, including the ability to explain technical findings and remediation actions clearly.
• Ability to work independently, contribute effectively within a team, and manage competing engagement priorities.

Why Join Us?

At McGrathNicol, you’ll thrive in an empowering environment where your expertise drives real impact. We offer a competitive annual bonus program, alongside exceptional training and career development opportunities. Our inclusive culture fosters growth through personalised mentorship. You’ll also benefit from comprehensive support such as 26 weeks parental leave, additional leave options, employee assistance, health and wellbeing programmes, and opportunities for social and community engagement. Join us and be part of a team that values your contributions and supports your success.