" \u003cdiv class=\"ja-job-details\"\u003e \u003ch2 class=\"title\"\u003ePenetration Tester | Brisbane CBD | $100,000 + super | relocation bonus\u003c/h2\u003e \u003cdiv class=\"meta\"\u003e \u003cul class=\"classifications\"\u003e \u003cli data-id=\"20749\"\u003e IT Security \u003c/li\u003e \u003cli data-id=\"20751\"\u003e Brisbane \u003c/li\u003e \u003cli data-id=\"20752\"\u003e Permanent / Full Time \u003c/li\u003e \u003c/ul\u003e \u003cp class=\"date-posted\"\u003e 15/10/2026 \u003c/p\u003e \u003c/div\u003e \u003cul class=\"bullet-points\"\u003e \u003cli\u003e$100k + super, Brisbane CBD, flexible WFH, Relocation Bonus\u003c/li\u003e \u003cli\u003eWeb, API, mobile, cloud, red team and hardware\u003c/li\u003e \u003cli\u003eTraining allowance, paid research and relocation bonus\u003c/li\u003e \u003c/ul\u003e \u003cdiv class=\"description\"\u003e Hey there, pen testers. Can you already hold your own on an engagement but know there\u0026rsquo;s plenty left to learn? Want your reports peer reviewed by people who\u0026rsquo;ve done the job themselves? You might like this one...\u003cbr\u003e \u003cbr\u003eBefore getting into the detail, here\u0026rsquo;s what\u0026rsquo;s in it for you in this permanent role:\u003cbr\u003e \u003cul\u003e \u003cli\u003e$100,000 + super\u003c/li\u003e \u003cli\u003eAn annual training allowance, plus conference, meetup and team CTF attendance\u003c/li\u003e \u003cli\u003eA paid research program, where you earn incentives for CVE discovery or security tool development\u003c/li\u003e \u003cli\u003eSalary packaging for a car, portable electronics and super\u003c/li\u003e \u003cli\u003eAISA, ISACA and OWASP memberships covered\u003c/li\u003e \u003cli\u003eUp to 3 paid volunteer days a year for a cause of your choice\u003c/li\u003e \u003cli\u003eFlexible WFH, with a CBD office near public transport that has fresh fruit, coffee and a weekly laundry service (yes, laundry)\u003c/li\u003e \u003cli\u003eAlready in Brisbane? Perfect. Coming from interstate? There\u0026rsquo;s a relocation bonus on offer to help with the move\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003e\u003cbr\u003eSo, what will you be stepping into?\u003c/strong\u003e\u003cbr\u003e \u003cbr\u003eThe offensive security team is growing. It\u0026rsquo;s currently around 16 testers delivering hundreds of tests a year for clients across government, defence, education, software, critical infrastructure and enterprise. That means a lot of variety, and room to lean into the areas that interest you most.\u003cbr\u003e You\u0026rsquo;ll own your engagements from scoping through to debrief, work directly with clients and have real say in how you run your day. Every engagement goes through proper peer review and QA, so you\u0026rsquo;ll be working with people who will challenge your work and help you improve it. People have joined this team in their first pentesting role and grown into principal testers and research leads.\u003cbr\u003e There\u0026rsquo;s also active investment in AI security, both breaking it and building with it. If that\u0026rsquo;s an area you want to get into early, this is a good place to do it.\u003cbr\u003e \u003cbr\u003e\u003cbr\u003e\u003cstrong\u003eDay to day, you\u0026rsquo;ll be:\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003ePenetration testing and running vulnerability assessments across web applications, APIs, mobile, internal and external infrastructure, wireless and cloud\u003c/li\u003e \u003cli\u003eTaking part in red team, social engineering and hardware engagements\u003c/li\u003e \u003cli\u003eWriting plain-English reports that work for both technical teams and executives\u003c/li\u003e \u003cli\u003eHelping with scoping and QA, and guiding associate testers as they find their feet\u003c/li\u003e \u003cli\u003eOccasionally supporting incident response and threat and risk assessments\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eTo succeed in a role like this, you\u0026rsquo;ll need:\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eFull Australian working rights and current residence in Australia. Sponsorship isn\u0026rsquo;t available for this role\u003c/li\u003e \u003cli\u003eHands-on penetration testing experience and the ability to run an engagement start to finish. You\u0026rsquo;re not expected to know everything, and this role suits someone still growing\u003c/li\u003e \u003cli\u003eStrong written and verbal communication. You\u0026rsquo;ll be in front of clients walking through findings and explaining why they matter to the business\u003c/li\u003e \u003cli\u003eConsulting or client-facing experience\u003c/li\u003e \u003cli\u003eScripting experience in Python, PowerShell or Ruby\u003c/li\u003e \u003cli\u003eWorking knowledge of CVSS, OWASP ASVS, NIST and ISO 27001/31000\u003c/li\u003e \u003c/ul\u003e If this has piqued your interest, hit APPLY or contact Kris on 0452 564 644 or kris@decipherbureau.com for a confidential, no-pressure chat. More detail can be shared confidentially to help you decide if it\u0026rsquo;s the right fit.\u003cbr\u003e\u003cbr\u003e\u003cbr\u003e \u003cem\u003eDecipher Bureau and the clients we partner with are committed to creating a diverse environment and are proud to be equal opportunity employers. All qualified applicants will be considered for employment without attention to race, colour, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status.\u003c/em\u003e \u003c/div\u003e \u003cdiv class=\"apply\"\u003e \u003ca class=\"back-link\" href=\"#\" title=\"Back to search results\"\u003eBack to search results\u003c/a\u003e \u003cinput type=\"button\" class=\"ja-button\" data-job-id=\"4478871\" value=\"Apply Now\" title=\"Apply Now\" /\u003e \u003c/div\u003e \u003c/div\u003e "