We’re BDO, a global professional services firm connected to local markets. Our people work together to provide specialist expertise, helping businesses achieve their goals.

We inspire others, to go further. We create together, to reach higher. We build trust, to lead purposefully.

Whether you're building your future or starting your career with us, you won’t do it alone. From creating solutions for our clients to building careers for our people, we shape what matters, and that’s where you come in.

About The Role

As a Senior Penetration Tester, you will lead offensive security engagements across enterprise, cloud, and Operational Technology (OT) environments, supporting government, critical infrastructure, and commercial organisations.

You will help clients understand how real-world threat actors could compromise their environments through penetration testing, Red Team exercises, adversary emulation, and security validation activities. This role combines deep technical expertise with client engagement, mentorship, and capability development, providing the opportunity to work on some of Australia's most critical and sensitive systems.

As part of BDO's Cyber Security team, you will work alongside experienced offensive security professionals, delivering complex assessments across Active Directory, cloud platforms, enterprise infrastructure, industrial control systems, and emerging technologies.

Key Responsibilities

- Lead and deliver penetration testing, Red Team, Purple Team, and adversary simulation engagements.
- Conduct security assessments across enterprise infrastructure, Active Directory, cloud platforms, web applications, APIs, and OT environments.
- Develop realistic threat-led attack scenarios aligned to client threat models and industry frameworks.
- Facilitate Purple Team exercises to validate detection and response capabilities.
- Identify security weaknesses and provide pragmatic, risk-based remediation recommendations.




- Present technical findings and risk insights to both technical and executive stakeholders.
- Support the development of offensive security methodologies, tooling, automation, and service offerings.
- Mentor consultants and contribute to capability development across the Cyber Security team.

About You

You are a technically skilled offensive security professional with a passion for helping organisations improve their security resilience through real-world security testing and adversary simulation.

Essential Skills And Experience

- Demonstrated experience delivering penetration testing, Red Team, adversary simulation, or Purple Team engagements.
- Strong understanding of enterprise technologies, including Active Directory, Windows, Linux, networking, and cloud environments.
- Experience identifying, exploiting, and demonstrating complex attack paths within enterprise environments.
- Practical experience testing web applications, APIs, cloud services, and enterprise infrastructure.
- Strong written and verbal communication skills, with the ability to explain technical concepts to both technical and non-technical audiences.
- Experience producing high-quality technical reports and executive-level summaries.
- Experience developing scripts or tooling using Python, PowerShell, Bash, C#, or similar languages.
- Conducting OT/ICS security assessments, threat-led testing, or security reviews within critical infrastructure sectors such as energy, utilities, transport, water, or manufacturing.
- Assessing industrial network architectures, industrial protocols, remote access solutions, and OT security controls, with familiarity of industry frameworks such as IEC 62443 and NIST 800-82.

Preferred Certifications

While certifications are not mandatory, the following are highly regarded:

- Offensive Security certifications such as OSCP, OSEP, OSWE, OSED, OSCE3, CRTO, CRTM, or equivalent.
- Cloud and security certifications such as CISSP, SC-100, AZ-500, AWS Security Specialty, or equivalent.

Why BDO?

- Working for BDO you will be part of a growing and market leading qualified services

#J-18808-Ljbffr

📌 Senior Penetration Tester (Queensland)
🏢 BDO in Australia
📍 Queensland