Conducting penetration testing across web, mobile, thick client, and wireless environments
Performing Red Teaming, code reviews, and vulnerability assessments
Embedding security assurance practices into client projects and operational environments
Identifying, communicating, and advising on security issues and remediation strategies
Improving tools, techniques, and methodologies for efficient testing outcomes
Delivering clear, actionable reports for technical and non-technical stakeholders
Supporting client engagements with on-site work as required

2–4 years of experience in penetration testing
Hands-on experience in penetration testing of web applications and internal networks (e.g., Active Directory)
Familiarity with common tools (Burp Suite, Nmap, Metasploit, etc.)
Scripting skills in Python, PowerShell or Bash
Understanding of common vulnerabilities and security testing methodologies (e.g., OWASP Top 10)
Strong written and verbal communication skills
Exposure to Red Teaming, mobile or wireless testing, or thick client assessments (bonus points)
Background in system administration, networking or web development (bonus points)
Experience with CTFs, bug bounty programs, or open-source security contributions (bonus points)
OSCP, CREST CRT or other relevant certifications (bonus points)

Public holiday swaps that embrace family and cultural diversity
Generous parental and caregiver leave
Flexible work options
Company-wide mentoring
3 days of paid volunteer leave each year
Novated leasing
Employee discounts
Full access to our wellbeing platform packed with expert fitness plans, nutrition tips, and tools to help you feel your best

Penetration Tester

Key skills