Penetration Tester - Systems Integrator

Are you looking for an exciting new opportunity?

Join one of Australia’s fastest-growing cybersecurity companies, offering a complete range of services from penetration testing, compliance, and risk management to 24/7/365 security operations and outsourced cybersecurity managers. Its team of experts draws on elite threat intelligence to deliver the highest level of professional cybersecurity services.

This is a great opportunity for a Penetration Tester to join the Offensive Security team. The ideal candidate will have 2-3 years of experience in a cybersecurity consulting environment and conduct technical assessments across web applications, mobile applications, and external infrastructure, identifying vulnerabilities and producing high-quality reports with actionable remediation recommendations. The role is delivery-focused and hands-on, rather than involving pre-sales or engagement scoping.

Don’t miss out on this exciting opportunity and apply today!

Responsibilities:

• Independently conduct penetration testing engagements across web applications, mobile applications and external-facing infrastructure.
• Identify, exploit and validate security vulnerabilities across client environments.
• Perform manual and automated security testing using industry-standard methodologies and tools.
• Assess application security risks, including vulnerabilities aligned with the OWASP Top 10.
• Conduct vulnerability analysis, exploitation and proof-of-concept development where appropriate.
• Produce detailed penetration testing reports outlining findings, risk ratings, business impact and remediation recommendations.
• Communicate technical findings clearly to clients and internal stakeholders.
• Perform remediation validation and retesting following security improvements.
• Maintain up-to-date knowledge of emerging vulnerabilities, attack techniques and offensive security methodologies.
• Work collaboratively with the broader Offensive Security team to ensure high-quality client deliverables.

Skills/Must Have:

• 2–3 years of commercial penetration testing experience, ideally gained within a cybersecurity consultancy or specialist penetration testing provider.
• Demonstrated experience independently delivering penetration testing engagements from technical execution through to final reporting.
• Strong hands-on experience in web application penetration testing.
• Practical experience testing mobile applications (iOS and/or Android).
• Experience conducting external infrastructure and network penetration testing.
• Strong understanding of OWASP Top 10, common vulnerabilities and exploitation techniques.
• Experience using penetration testing tools such as Burp Suite, Nmap, Metasploit, Nessus and Kali Linux.
• Ability to manually identify and validate vulnerabilities beyond automated scanning.
• Strong technical report-writing skills, with the ability to communicate findings and remediation recommendations effectively.
• Good understanding of networking protocols, operating systems and application security fundamentals.
• Strong problem-solving skills and the ability to work independently.
• A technically strong, hands on penetration tester who enjoys identifying vulnerabilities, understanding how systems can be compromised and helping organisations improve their security
• Experience working in a consulting environment, comfortable managing technical assessments and able to deliver professional, client ready penetration testing reports
• Looking for an opportunity to further develop offensive security skills while contributing to a growing cybersecurity consultancy

Desirable Skills:

• Industry certifications such as OSCP, CREST CRT, CREST CCT, eWPT or equivalent.
• Experience testing APIs and cloud-hosted applications.
• Knowledge of Active Directory security and internal network exploitation.
• Experience with scripting languages such as Python, Bash or PowerShell.
• Familiarity with recognised penetration testing methodologies, including OWASP WSTG and PTES.
• Experience working directly with customers in a consulting environment.

Benefits:

• Join an established Australian cybersecurity consultancy with a dedicated Offensive Security practice.
• Gain exposure to diverse client environments across multiple industries.
• Work on technically challenging penetration testing engagements.
• Collaborate with experienced cybersecurity professionals.
• Continue developing technical expertise across application and infrastructure security.
• Build your career within a specialist cybersecurity organisation.

Salary:

• Competitive and negotiable depending on experience OR Competitive salary based on experience and qualifications