Senior Penetration Testing Consultant

2 days ago

Sydney, New South Wales, Australia Cybertify Full time $120,000 - $180,000 per year
About Cybertify

Cybertify is Australia's premier compliance-first cybersecurity consulting firm, proudly Australian owned, fully independent, and sovereign in every respect. We specialise in protecting and enabling organisations in the country's most heavily regulated sectors: financial services, superannuation, legal, aged care, healthcare, banking, technology, and government-aligned enterprises.

Our clients demand more than security, they demand speed, trust, and board-level credibility. Cybertify delivers with rapid scoping, swift execution, and executive-ready outcomes that boards, regulators, insurers, and auditors respect.

Our Elite Cyber Squad, a hand-picked team of industry-leading red teaming, penetration testing, governance, and defensive experts, brings Big 4 calibre expertise with boutique agility, ensuring precision, independence, and uncompromising results.


About the Role

We are seeking a Senior Penetration Testing Consultant to deliver cutting-edge offensive security engagements across diverse client environments. This is a consulting delivery role — client-facing, hands-on, and outcome-driven.

You will scope, plan, and execute penetration tests across applications, infrastructure, cloud, mobile, wireless, IoT, and AI/LLM platforms. You'll emulate modern attack techniques, produce executive-ready reporting, and provide clear, practical remediation guidance to uplift client resilience.

This is not an internal tester role. You will be embedded in high-trust client engagements, working directly with CISOs, IT teams, and boards.


Key Responsibilities
Offensive Testing Delivery

  • Deliver full-spectrum penetration testing, including:

  • Web Application & API Security (OWASP Top 10, custom business logic testing).

  • External Infrastructure assessments (internet-facing assets, cloud edge).
  • Internal Infrastructure testing (Active Directory, lateral movement, privilege escalation).
  • Cloud Security (Azure, AWS, M365 exploitation, misconfiguration testing).
  • Mobile & Desktop Application Security (iOS, Android, Windows, macOS).
  • Wireless Network Security (rogue APs, WPA2/3 attacks, interception, exploitation).
  • Hardware & IoT Security (embedded systems, firmware analysis, exploitation).
  • Restricted Environment Breakout (VDI, kiosks, locked-down devices).
  • AI/LLM Penetration Testing (prompt injection, adversarial ML, model exploitation).
Client-Facing Consulting
  • Engage directly with clients to scope penetration testing engagements.
  • Run workshops and technical walkthroughs with IT/security teams.
  • Present executive reports and remediation roadmaps to CISOs and boards.
  • Provide practical, actionable guidance to close findings and strengthen resilience.
Reporting & Assurance
  • Produce executive-ready reports that explain risks in clear business language.
  • Provide detailed technical documentation for IT/security teams.
  • Ensure all deliverables meet Cybertify's audit-ready and regulator-credible standards.
Collaboration & Contribution
  • Collaborate with Cybertify's Red Team operators and GRC consultants to deliver integrated security outcomes.
  • Contribute to the development of Cybertify's penetration testing playbooks, templates, and methodologies.
  • Mentor junior consultants and share expertise across the Elite Cyber Squad.

Ideal Candidate
  • 5+ years' hands-on penetration testing experience in a consulting environment (not in-house).
  • Proven expertise across multiple domains: web, infra, cloud, mobile, wireless, IoT, restricted environments, AI/LLM.
  • Strong knowledge of OWASP, MITRE ATT&CK, CREST/NCSC standards, and modern attack tooling.
  • Proficient in common frameworks: Burp Suite, Cobalt Strike, Metasploit, Nmap, Kali, Wireshark, etc.
  • Ability to script and develop tools in Python, PowerShell, C#, or similar.
  • Experienced in executive communication — can deliver board-level reports and technical deep dives.
  • Strong consulting presence: comfortable leading client meetings, scoping engagements, and presenting findings.
Certifications (Highly Regarded)
  • CREST Registered/Certified Tester (CCT, CRT).
  • OSCP / OSEP / OSWE / OSCE3 (or equivalent Offensive Security advanced certs).
  • GIAC GPEN / GXPN.
  • AWS/Azure Security certifications (where cloud is a focus).

Why Join Cybertify?
  • Elite Cyber Squad Advantage: Work directly with Australia's most experienced cybersecurity professionals.
  • Agile Disruption: Be part of a lean, fast-moving firm that delivers high-value results without the red tape and politics of bloated consultancies.
  • Impactful Work: Solve complex, high-stakes cybersecurity and compliance challenges for boards, regulators, and executives across Australia's most critical sectors.
  • Compliance-First DNA: Operate at the unique intersection of security and governance where GRC integration is not an add-on, but the foundation of every engagement.
  • Professional Growth: Gain exposure to cutting-edge tools, advanced methodologies, and enterprise-grade frameworks (ISO 27001, SOC 2, Essential 8, CPS 234, NIST, and more).
  • Independent & Trusted: Provide objective advice, free from vendor influence or offshore conflicts. Cybertify's independence ensures client trust is never compromised.
  • Australian Sovereign Cyber: Support a firm that is 100% Australian owned and operated, designed to protect Australian businesses with Australian expertise.

What We Offer
  • A high-trust workplace with genuine autonomy, influence, and zero micromanagement.
  • Direct client impact—your work is seen at board and executive levels, not buried in handovers.
  • Premium salary packages aligned with market-leading consulting firms, reflecting the calibre of talent we hire.
  • Professional development pathways, including funded certifications, training, and industry memberships.
  • Exposure to elite projects spanning offensive security, GRC, Zero Trust, regulatory alignment, and incident response.
  • State-of-the-art Sydney CBD office with premium client and collaboration spaces.
  • Cutting-edge tools and platforms across project delivery, client engagement, and cybersecurity operations.
  • A supportive, collaborative team culture that balances intensity with respect, and professionalism with ambition.
  • The opportunity to be part of a nationally recognised, fast-growing, sovereign cybersecurity force that is redefining the cyber consulting market.

Ready to Join Australia's Cyber Elite?

Click Apply and submit your CV with a short cover letter.

Apply now and discover why Australia's top cyber talent chooses Cybertify as their career destination.

Cybertify - Defending Australia's Digital Future, One Elite Professional at a Time

  • Senior Penetration Tester

    1 day ago

    Sydney, New South Wales, Australia CareCone Group Full time $120,000 - $180,000 per year

    Role:Senior Penetration TesterLocation:Sydney/ Melbourne/ CanberraEmployment Type:ContractDuration:9 monthsMust have:Full working rights. No sponsorship available.Role OverviewThe SeniorPenetration Testerwill lead and execute advanced penetration testing and vulnerability assessment activities across applications, networks, cloud, and infrastructure. This...

  • Security penetration testing

    5 days ago

    Sydney, New South Wales, Australia ITbility Full time $100,000 - $150,000 per year

    Security penetration testingContract - 6+ MonthsMelbourne/ SydneyMy client in Melbourne/Sydney looking forSecurity penetration testingforContract - 6+ Months.Kindly go through the below PD and let me know if the role suits and interests you, your friends or colleagues. You can send me your resumes/referrals atJob Description :-4+ years in penetration...

  • Penetration Tester

    1 day ago

    Sydney, New South Wales, Australia Cyberlinx Full time $120,000 - $180,000 per year

    Cyberlinx | Full-Time | Remote (Australia-based)Cyberlinx is a fast-growing, pure-play cybersecurity consultancy delivering high-impact work across enterprise, government, and critical infrastructure. We're looking for a highly skilled Lead Penetration Tester and take the lead on advanced testing engagements across Australia.About the RoleAs a Lead Pen...

  • Penetration Tester

    5 days ago

    Sydney, New South Wales, Australia QBID Infotech Full time $120,000 - $180,000 per year

    Job Title:Penetration Tester (Onshore)Experience Required:6+ yearsLocation:Sydney / Melbourne / Brisbane / Adelaide / Perth (Onsite/Hybrid as per project needs)About the RoleWe are seeking experiencedPenetration Testerswith strong expertise in security testing, ethical hacking, and vulnerability assessments. The role involves assessing applications,...

  • Information Security Senior Consultant

    2 weeks ago

    Sydney, New South Wales, Australia Westpac Group Full time $150,000 - $200,000 per year

    Job DescriptionCreate your best future and join Westpac as a Information Security Senior Consultant (Penetration Testing).What's the role?This role will be responsible for advising Westpac's business and IT units on information security, with a specific focus on penetration testing and vulnerability management.It will involve planning and executing security...

  • Senior IT Security Penetration Tester

    5 days ago

    Sydney, New South Wales, Australia Reserve Bank of Australia Full time $120,000 - $180,000 per year

    Exposure to diverse technologies and applicationsOpportunity to perform purple team engagementsDo work that makes a differenceThis is an exciting opportunity to work in a highly mature cyber security team. This role sits within the Assessments and Testing team in the Bank's IT security services. As part of the role, you will be working closely with a wide...

  • Penetration Tester

    2 days ago

    Sydney, New South Wales, Australia Robert Walters Full time $120,000 - $160,000 per year

    An exciting opportunity has arisen for a Penetration Tester to join a well-established cyber security team within a large organisation. This role offers the chance to work on a variety of offensive security engagements in a complex environment, building your skills alongside experienced security professionals and contributing to high-profile projects.What...

  • Principal Penetration Tester

    1 day ago

    Sydney, New South Wales, Australia Decipher Bureau Full time

    Are you technical and looking for an opportunity that can leverage your expertise?Maybe you've been pigeonholed into web app, after web app, or you're stuck in an organisation with limited career growth opportunities?If you're a seasoned penetration tester or red teamer, this role is worth exploring.About CompayWe're partnering with a fast-growing,...

  • Sydney-Consultant Level 2-Quality Engineering

    2 weeks ago

    Sydney, New South Wales, Australia Planit Testing Full time $120,000 - $180,000 per year

    Planit are world leaders in application testing and quality engineering. We provide solutions that support organisations to deliver high quality systems, applications, and IT architecture.Planit is now a proud NRI company and part of a global movement to deliver a sustainable and secure future through better Information Technology exchanges. Our team offer...

  • Penetration Testing Specialist

    5 days ago

    Sydney, New South Wales, Australia Microsoft Full time $120,000 - $180,000 per year

    Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft 365 aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, and developer with a security cloud that protects them with end to end, simplified...