" \u003cdiv class=\"ja-job-details\"\u003e \u003ch2 class=\"title\"\u003ePenetration Tester / Security Consultant\u003c/h2\u003e \u003cdiv class=\"meta\"\u003e \u003cul class=\"classifications\"\u003e \u003cli data-id=\"14076\"\u003e IT Security \u003c/li\u003e \u003cli data-id=\"14077\"\u003e Permanent / Full Time \u003c/li\u003e \u003cli data-id=\"14078\"\u003e Sydney \u003c/li\u003e \u003c/ul\u003e \u003cp class=\"date-posted\"\u003e 4/11/2026 \u003c/p\u003e \u003c/div\u003e \u003cul class=\"bullet-points\"\u003e \u003cli\u003ePermanent | Sydney preferred, anywhere on the East Coast | Up to $150K package\u003c/li\u003e \u003cli\u003eWeb app, infrastructure and red team work across a mix of client industries\u003c/li\u003e \u003cli\u003eJoin a team with 25+ OSCP-certified consultants\u003c/li\u003e \u003c/ul\u003e \u003cdiv class=\"description\"\u003e We\u0027re partnering with one of Australia\u0027s most awarded IT and cyber security providers, now backed by a global technology group. They\u0027ve been helping organisations stay secure for over 20 years, and their offensive security practice is growing. They\u0027re looking for mid-level Penetration Testers to join the team.\u003cbr\u003e This is a hands-on technical consulting role. You\u0027ll deliver testing engagements for clients across a range of industries, find the issues that matter, and explain clearly how to fix them. You\u0027ll work alongside a big, experienced team of testers, with genuine support to keep learning, get certified and get along to security conferences.\u003cbr\u003e \u003cbr\u003e There\u0027s no set office-days policy. Plenty of the team work most of the time remotely, although some client engagements may call for more time on site.\u003cbr\u003e \u003cbr\u003e \u003cstrong\u003eWhat\u0027s on offer\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003ePackage up to $150K, depending on experience\u003c/li\u003e \u003cli\u003eFlexible, remote-friendly working with no mandated office days\u003c/li\u003e \u003cli\u003eA large, highly skilled offensive security team (25+ OSCP-certified consultants) that\u0027s generous with knowledge\u003c/li\u003e \u003cli\u003eSupport for further training, certifications and attending security conferences\u003c/li\u003e \u003cli\u003eVariety: a broad mix of engagement types and client industries, including financial services\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eWhat you\u0027ll be doing\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eDeliver penetration tests across internal and external infrastructure, web applications, databases, mobile and wireless\u003c/li\u003e \u003cli\u003eRun vulnerability assessments (internal, external, web application and database)\u003c/li\u003e \u003cli\u003eContribute to red team attack simulations\u003c/li\u003e \u003cli\u003eCarry out firewall and password audits, SOE security assessments and source code reviews\u003c/li\u003e \u003cli\u003eSupport security risk (ISO 27001) and privacy impact (APP) assessments\u003c/li\u003e \u003cli\u003eWrite clear, practical reports and talk clients through findings, risk and remediation options\u003c/li\u003e \u003cli\u003eUse scripting and automation to make your testing more efficient\u003c/li\u003e \u003cli\u003eKeep up with emerging threats, techniques and tooling through ongoing research and development\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eWhat you\u0027ll bring\u003cbr\u003e\u003c/strong\u003e\u003cbr\u003e \u003cstrong\u003eMust-have:\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eAround 3-5 years\u0027 hands-on experience as a Penetration Tester or Security Consultant\u003c/li\u003e \u003cli\u003eSolid web application and infrastructure (internal/external) testing experience\u003c/li\u003e \u003cli\u003eA proven track record delivering security testing engagements end to end, including reporting\u003c/li\u003e \u003cli\u003eThe ability to explain findings and recommend practical remediation or mitigation\u003c/li\u003e \u003cli\u003eComfortable working autonomously as well as part of a team\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eDesirable:\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eA recognised penetration testing certification such as OSCP, OSCE or CREST (strongly preferred)\u003c/li\u003e \u003cli\u003eRed team or adversary simulation experience\u003c/li\u003e \u003cli\u003eExperience testing for financial services clients\u003c/li\u003e \u003cli\u003eScripting/programming skills for testing and automation (e.g. Python, PowerShell, Bash)\u003c/li\u003e \u003cli\u003eMobile, wireless or source code review experience\u003c/li\u003e \u003cli\u003eAny CVEs or 0days attributed to you\u003c/li\u003e \u003cli\u003eA current NV1 or NV2 security clearance, or Defence Force experience\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eEssential requirement\u003c/strong\u003e\u003cbr\u003e Candidates must have full working rights in Australia and be based on the East Coast (Sydney preferred).\u003cbr\u003e \u003cbr\u003e \u003cstrong\u003eAbout Decipher Bureau\u003c/strong\u003e\u003cbr\u003e Decipher Bureau is Australia\u0027s leading cyber security recruitment specialist, partnering with organisations across government, critical infrastructure and enterprise to find and secure exceptional talent. We don\u0027t just match skills to a job description. We take the time to understand the technical demands of a role and whether a candidate will genuinely thrive in the team. Because the right placement beats a quick one, every time.\u003cbr\u003e \u003cbr\u003e \u003cstrong\u003eInterested?\u003c/strong\u003e\u003cbr\u003e Reach out for a confidential chat:\u003cbr\u003e \u003cul\u003e \u003cli\u003eAnthony Buccat | 0452 415 858\u003c/li\u003e \u003cli\u003eabuccat@decipherbureau.com\u003c/li\u003e \u003c/ul\u003e \u003c/div\u003e \u003cdiv class=\"apply\"\u003e \u003ca class=\"back-link\" href=\"#\" title=\"Back to search results\"\u003eBack to search results\u003c/a\u003e \u003cinput type=\"button\" class=\"ja-button\" data-job-id=\"4483642\" value=\"Apply Now\" title=\"Apply Now\" /\u003e \u003c/div\u003e \u003c/div\u003e "