Penetration Tester

About the role

We are partnering with a cybersecurity consultancy to expand its Offensive Security team. The role is a hands‑on penetration testing position delivering assessments across web, mobile and infrastructure.

Key responsibilities

• Independently conduct web application, mobile application and external infrastructure penetration tests.
• Identify, validate and document vulnerabilities, assessing their business impact.
• Develop clear, actionable remediation recommendations for clients.
• Produce client‑ready technical reports with minimal senior review.
• Manage testing activities and deliverables across multiple client engagements.
• Maintain a strong understanding of current attack techniques and offensive security methodologies.

Required profile

• 2–3 years of commercial penetration testing experience within a cybersecurity consultancy.
• Proven experience independently delivering web, mobile and infrastructure assessments.
• Ability to write high‑quality, client‑ready penetration testing reports.
• OSCP or OSCP+ certification as a minimum.
• Strong technical problem‑solving skills and the ability to work autonomously.
• Australian citizenship.

Required skills

• OSCP certification
• Penetration testing of web applications, mobile applications and external infrastructure

What we offer

• Fully remote opportunity, open to candidates anywhere in Australia.
• Hands‑on offensive security work across varied client environments.
• Delivery‑focused role without pre‑sales or scoping responsibilities.