Penetration Tester – Application Security

We're seeking an experienced Penetration Tester to join a Perth-based client on a contract engagement, conducting application security testing within a critical infrastructure environment. This is a hands-on role focused on application penetration testing, working closely with internal security and operational teams to safely assess enterprise applications and deliver clear, actionable risk reporting.

WHAT'S ON OFFER

- 25-day engagement
- $1,200 a day, inclusive of superannuation
- Perth based
- Opportunity to work within a critical infrastructure environment on a high-visibility security testing programme

THE ROLE: Working closely with internal security and operational teams, you will conduct application penetration testing across enterprise systems, applying safe testing practices appropriate to an operationally sensitive environment. Key responsibilities include:

- Conduct application penetration testing across enterprise web applications, including authentication, authorisation, business logic, APIs, file handling and session management
- Apply IT/OT-aware testing practices, working within change control processes, agreed test windows and non-disruptive validation methods
- Assess UNIX/Linux application stacks, including services, permissions, patch exposure, logging and privilege escalation risks
- Translate technical findings into clear business impact statements, executive-level risk summaries and prioritised remediation recommendations




- Work collaboratively with internal security and operational teams throughout the engagement

THE COMPANY: A Perth-based organisation running an active security testing programme, seeking a hands-on consultant to support application penetration testing in an operationally sensitive environment.

SKILLS & EXPERIENCE:

- Demonstrated experience in application security and penetration testing, including web applications, APIs and authentication/authorisation controls
- Experience working in critical infrastructure or similarly regulated environments (e.g. electricity, utilities, telecommunications, industrial/OT, petroleum, oil & gas)
- Sound understanding of protected testing practices in operationally sensitive environments
- Strong UNIX/Linux security assessment experience
- Excellent report writing and stakeholder communication skills, with the ability to translate technical risk into business language
- Familiarity with relevant standards and frameworks, including ASD Essential Eight, AESCSF, NIST SP 800, IEC/ISO 62443, OWASP and MITRE ATT&CK;

Please note: You must have Full Working Rights in Australia and be based in Perth. To apply, click the link and upload your current resume in Microsoft Word format (.doc or .docx), or send a copy of your CV to [email protected] for a confidential discussion. Please note: Only suitable candidates will be contacted regarding this vacancy.

📌 Penetration Tester (Perth)
🏢 Full Circle Partners
📍 Perth