Assessment, hardening and advisory work for Australian businesses. You will run offensive testing, write findings a client can act on, and re-test once the fix lands.

What you will do

• Run penetration tests and security assessments against the OWASP and ASD playbooks.
• Assess and harden cloud environments, including Azure and Entra ID.
• Take clients through compliance readiness against the Essential Eight, SMB1001 and ISO 27001.
• Write findings with reproduction steps and a recommended fix for each one.
• Re-test remediation and contribute to standing advisory engagements, including vCISO work.

What you need

• Hands-on penetration testing or security assessment experience.
• Working knowledge of the frameworks Australian businesses are asked for: the Essential Eight, SMB1001, ISO 27001, and the Privacy Act.
• Enough engineering background to read code and talk credibly to the people who wrote it.
• Reporting discipline. Findings are manually verified and reproducible before they are reported.
• The right to work in Australia.