_{09th October, 2025}

The successful candidate will be confident completing Webapp PenTests e2e including writing the report

What this role involves

As a Security Consultant your responsibilities are to deliver on security testing engagements, grow your consultancy skills, progress your technical skillset and positively contribute to our culture.

Day to day you will:

• Conduct security tests on customer information systems, webapps, infrastructure, software, network 
• Provide robust and considered remediation advice that addresses security weakness and improves security posture
• Develop metrics to enable our customers to make informed decisions about the posture of their environment.

Unimagined opportunity with our Security Testing & Assurance team
On our team, you get access to an unmatched range of customers, work on unique projects and do it while working alongside some of the best in the industry.

If you’re keen to get out from behind a desk, we also test hardware (think ATMs, medical devices, satellites, and various operational technology) and we put our customers to the test with social engineering, red teaming, and physical penetration testing.

We celebrate our craft (think Hack of the Month), share our discoveries (internal conferences where we share our research) and you’ve probably seen our team at local meet ups and cons because we support and encourage them to get involved.


The work we do matters
We protect and defend our customers and communities by providing the widest range of cyber security professional services in the region.

With more than 1,400 team members across Australia, New Zealand, the UK and US, we are a leading force in cyber security, offering services from strategy, GRC, managed security services, cloud security, digital forensics and cyber education.

If you’re ready to work with teammates that get you, a leader that supports you and customers that need you, then you’re ready for CyberCX.

Skills and experience

This role requires full working rights in Australia (no current or future sponsorship).

A minimum of two years as a security testing/cyber practitioner in which you have developed capability in managing client expectations, your time, technical security testing, and report writing.

• Working knowledge of web application and network security, with hands-on experience in manual testing techniques and the use (and limitations) of automated scanners
• Effective stakeholder engagement and communication skills
• Strong analytical and problem-solving skills
• Knowledge of various operating systems and networks, especially Linux, Windows, and Active Directory
• Related certifications such as OSCP, CREST CCT (Applications or Infrastructure), SANS or other (apply even if you’re still working towards any of these)

Be yourself. We embrace diverse perspectives, experiences, and backgrounds. Please let us know if you require additional support or adjustments to assist with your recruitment experience.

We take security seriously. We require all employees to complete background checks (including police and global sanction list checks) annually.

Where appropriate, the CCX Talent Team will work with our preferred panel of agencies. Fees will not be paid for unsolicited resumes that are submitted directly to hiring managers and not through our approved process.

Apply For Job