Penetration Tester / Security Consultant We're partnering with one of Australia's most awarded IT and cyber security providers, now backed by a global technology group. They've been helping organisations stay secure for over 20 years, and their offensive security practice is growing. They're looking for mid-level Penetration Testers to join the team. This is a hands-on technical consulting role. You'll deliver testing engagements for clients across a range of industries, find the issues that matter, and explain clearly how to fix them. You'll work alongside a big, experienced team of testers, with genuine support to keep learning, get certified and get along to security conferences.

There's no set office-days policy. Plenty of the team work most of the time remotely, although some client engagements may call for more time on site.

What's on offer

Package up to $150K, depending on experience

Flexible, remote-friendly working with no mandated office days

A large, highly skilled offensive security team (25+ OSCP-certified consultants) that’s generous with knowledge

Support for further training, certifications and attending security conferences

Variety: a broad mix of engagement types and client industries, including financial services

What you'll be doing

Deliver penetration tests across internal and external infrastructure, web applications, databases, mobile and wireless

Run vulnerability assessments (internal, external, web application and database)

Contribute to red team attack simulations

Carry out firewall and password audits, SOE security assessments and source code reviews





Support security risk (ISO 27001) and privacy impact (APP) assessments

Write transparent, practical reports and talk clients through findings, risk and remediation options

Use scripting and automation to make your testing more efficient

Keep up with emerging threats, techniques and tooling through ongoing research and development

What you'll bring Must-have:

Around 3-5 years' hands-on experience as a Penetration Tester or Security Consultant

Solid web application and infrastructure (internal/external) testing experience

Desirable:

A recognised penetration testing certification such as OSCP, OSCE or CREST (strongly preferred)

Red team or adversary simulation experience

Experience testing for financial services clients

Scripting/programming skills for testing and automation (e.g. Python, PowerShell, Bash)

Mobile, wireless or source code review experience

Any CVEs or 0days attributed to you

A current NV1 or NV2 security clearance, or Defence Force experience

Essential requirement Candidates must have full working rights in Australia and be based on the East Coast (Sydney preferred).

About Decipher Bureau Decipher Bureau is Australia's leading cyber security recruitment specialist, partnering with organisations across government, critical infrastructure and enterprise to find and secure exceptional talent. We don't just match skills to a job description. We take the time to understand the technical demands of a role and whether a candidate will genuinely thrive in the team. Because the right placement beats a quick one, every time.

#J-18808-Ljbffr

📌 Penetration Tester (Adelaide)
🏢 The Decipher Bureau
📍 Adelaide