An Australian technology and cybersecurity consulting firm is seeking experienced, CREST-qualified penetration-testing professionals to collaborate on enterprise cybersecurity assessment engagements.

We are building a network of specialist security professionals for an upcoming Melbourne-based project, with opportunities to participate in future cybersecurity consulting and security assessment engagements across Australia.

We welcome applications from experienced independent consultants, self-employed penetration testers and small specialist teams.

Location: Melbourne, Victoria, Australia
Engagement Type: Contract / Subcontract / Project-Based
Anticipated Initial Engagement: November–December 2026
Future Opportunities: Potential ongoing project-based collaboration
Remuneration: Competitive, negotiable hourly or daily contractor rates

Specialist Opportunities

We are interested in candidates with expertise in one or more of the following areas:

1. Network and Infrastructure Penetration Testing

- Internal and external network penetration testing.
- Windows and Active Directory security assessments.
- Network segmentation, VPN and infrastructure security.
- Manual vulnerability validation and controlled exploitation.
- Evidence-based technical reporting and remediation recommendations.

2. Web Application and API Security Testing

- Web application penetration testing using OWASP methodologies.
- Authentication, authorisation and session security assessments.
- API security and business logic testing.
- Manual vulnerability verification and risk assessment.
- Technical findings, remediation guidance and retesting.

3. Wireless Network Penetration Testing

- Enterprise wireless security assessments.
- WPA2/WPA3-Enterprise, IEEE 802.1X and certificate-based wireless authentication using client and server certificates.
- Experience with Aruba wireless infrastructure and ClearPass.
- Wireless authentication, configuration and access-control assessments.
- Onsite wireless testing and technical reporting.





Essential Qualifications and Experience

- Current, verifiable individual CREST qualifications appropriate to the proposed penetration-testing or reporting responsibilities.
- Demonstrated experience performing professional penetration-testing engagements.
- Strong knowledge of recognised security testing methodologies and industry standards.
- Ability to deliver high-quality technical reports with documented findings, CVSS-based risk ratings, supporting evidence and prioritised remediation recommendations.
- Ability to work independently or collaboratively with other security specialists.
- Availability to attend client premises in Melbourne where onsite testing is required.
- Willingness to comply with applicable confidentiality, security screening and client site-access requirements.

Relevant certifications such as OSCP, CCT Infrastructure, CCT Application and other advanced security qualifications will be considered favourably.

Desirable Experience

- Previous penetration-testing work for Australian government or enterprise organisations.
- Experience coordinating testing activities with SOC teams and security monitoring platforms.
- Familiarity with MITRE ATT&CK;, SIEM, EDR and enterprise security controls.
- Experience producing executive summaries and conducting remediation verification.
- Ability to work within established consulting, subcontracting and white-label delivery arrangements.

Engagement Arrangements

Certain activities require physical onsite attendance in Melbourne. Other technical assessment and reporting activities may be undertaken remotely where authorised.





We are particularly interested in developing longer-term professional relationships with qualified specialists who may be available for future engagements.

Remuneration

Competitive contract rates will be negotiated based on qualifications, specialist expertise, demonstrated experience, availability and the agreed project scope.

How to Apply

Please provide:

- A current CV or professional capability summary.
- Relevant CREST certifications and other security qualifications.
- Your primary penetration-testing specialisation.
- Availability for Melbourne onsite work during the period of engagement.
- A brief overview of relevant enterprise or government-sector experience.
- Confirmation of your preferred contracting arrangement and insurance availability.

Shortlisted applicants may be requested to provide professional references and a sanitised sample technical report during a face-to-face interview in Melbourne.

Our Recruitment and Assessment Approach

We value genuine penetration-testing experience, technical expertise and skilled integrity.

We do not conduct AI-based candidate assessments or use automated Applicant Tracking System (ATS) scoring to evaluate applicants.

We assess candidates through direct professional discussion, examination of relevant technical experience and practical understanding of penetration-testing methodologies.

We are interested in your actual penetration-testing experience, not an AI-generated or embellished résumé.

Important:

- No video interviews.
- All interviews will be conducted face-to-face in Melbourne.
- Applications will be reviewed by people, with emphasis on demonstrated technical capabilities, relevant certifications and professional experience.

We welcome professionals who can explain their methods, discuss their technical findings and demonstrate the reasoning behind their security assessments.

Independent penetration testers and specialist security professionals seeking project-based collaboration are encouraged to apply.

Work Location: Hybrid remote in Melbourne VIC

📌 CREST-Certified Penetration Testing Specialists | Contract Opportunities | Melbourne
🏢 GABEY CONSULTING PROPRIETARY
📍 Melbourne