Penetration Tester

Penetration Tester| Melbourne

About the Opportunity

We're working with a cybersecurity consultancy looking to expand its Offensive Security team due to increasing client demand.

This is a hands-on penetration testing role suited to a technically capable consultant who can independently deliver assessments, identify vulnerabilities and produce high-quality reports. You'll work across web applications, mobile applications and external infrastructure, taking ownership of engagements from testing through to final reporting.

This is a delivery-focused position, with no requirement to undertake scoping or pre-sales activities.

Key Responsibilities

• Independently conduct web application, mobile application and external infrastructure penetration tests.
• Identify, validate and document vulnerabilities, assessing their potential business impact.
• Develop clear, actionable remediation recommendations for clients.
• Produce client-ready technical reports with minimal senior review.
• Manage testing activities and deliverables across multiple client engagements.
• Maintain a strong understanding of current attack techniques, vulnerabilities and offensive security methodologies.

What We're Looking For

• 2–3 years of commercial penetration testing experience within a cybersecurity consultancy.
• Proven experience independently delivering web application, mobile application and external infrastructure assessments.
• Ability to write high-quality, client-ready penetration testing reports.
• OSCP or OSCP+ certification as a minimum.
• Strong technical problem-solving skills and the ability to work autonomously.
• Australian citizenship.

What's on Offer

• Fully remote opportunity, open to candidates anywhere in Australia.
• Hands-on offensive security work across varied client environments.
• A delivery-focused role with the opportunity to deepen your technical expertise without the demands of pre-sales or scoping