Job Overview & Organization Mission

Simulate real-world cyber adversaries to uncover vulnerabilities across enterprise networks, web applications, and cloud infrastructures at CyberCX.

CyberCX is seeking a skilled Senior Penetration Tester to join our Offensive Security practice in Brisbane. You will deliver high-stakes penetration tests, red teaming exercises, and cloud security reviews for Australia’s leading banking, government, and critical infrastructure institutions, providing actionable remediation advice.

As a key member of the team at CyberCX in Brisbane, QLD, you will play a central role in driving excellence, upholding top-tier Australian industry standards, and contributing directly to the strategic milestones of one of the nation’s premier employers.

Key Duties & Core Responsibilities

In this critical role, your operational duties and key performance responsibilities will encompass:

• Execute comprehensive: Execute comprehensive web application, API, mobile, and network penetration tests.
• Conduct full-scope: Conduct full-scope red teaming engagements simulating advanced adversary initial access and lateral movement.
• Assess Active: Assess Active Directory environments for privilege escalation paths, kerberoasting, and domain dominance flaws.
• Author lucid,: Author lucid, client-facing technical reports outlining discovered vulnerabilities, business risks, and pragmatic fixes.
• Collaborate with: Collaborate with client security leadership during debrief presentations and defensive blue-team workshops.

Required Qualifications, Licenses & Experience

To be successful in this position at CyberCX, candidates are expected to satisfy the following essential selection criteria:

• Mandatory Qualification: Industry certifications (OSCP, OSEP, OSCE, CREST CRT) or relevant Computer Science degree.
• Relevant Experience: Minimum 5+ Years of verified industry experience in Australia or recognized overseas equivalence.
• 5+ years of dedicated professional penetration testing experience with a reputable consultancy or in-house red team.
• Hold recognized offensive security certifications (OSCP, OSWE, CRTO, or CREST Registered Tester).
• Solid proficiency with offensive tools (Burp Suite Pro, BloodHound, Cobalt Strike, Metasploit, Impacket).
• Strong written and verbal communication skills with the ability to explain technical risk to executive stakeholders.

Core Competencies & Key Technical Proficiencies

The successful applicant will possess demonstrated capabilities across the following domain skill sets:

Salary, Compensation & Employee Benefits

At CyberCX, we understand that our people drive our achievements. An outstanding remuneration and wellbeing package is provided in line with Australian benchmarks:

• Competitive Remuneration: AU$155,000 – AU$185,000 per year + standard Australian Superannuation (11.5%).
• Top compensation ($155,000 – $185,000) + performance-based consultancy bonuses.
• Dedicated research and development time (20% time) to write exploits and discover zero-days.
• Collaborative elite peer culture with access to the largest cybersecurity community in APAC.
• Leave Entitlements: 4 weeks annual leave (with 17.5% annual leave loading where applicable) plus 10 days paid personal/carer’s leave.
• Flexible Work: Progressive work-life balance options with supportive corporate culture and leadership development pathways.

About the Employer: CyberCX

CyberCX is Australia and New Zealand’s leading dedicated cybersecurity services provider, delivering offensive security, governance, and cloud defense.

CyberCX is deeply committed to building diverse, equitable, and culturally inclusive work environments. We proudly celebrate diversity and welcome applications from all qualified individuals including First Nations Australians, people with disabilities, and candidates from culturally and linguistically diverse backgrounds.

Application Process & Next Steps

Applications for this position are currently open and being reviewed on a rolling basis. Suitable candidates are encouraged to apply as early as possible before the published closing date.

Please prepare an updated Curriculum Vitae (CV) and a tailored Cover Letter highlighting your relevant experience against the key selection criteria outlined above.

To proceed with your application, click the Apply on Employer Site button to access the official CyberCX careers gateway.