Penetration Tester

Job not on LinkedIn

🔥 10 minutes ago

🇦🇺 Australia – Remote

⏰ Full Time

🟢 Junior

🟡 Mid-level

🔧 QA Engineer (Quality Assurance)

👻 Ghost score 14%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Packetlabs

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2011

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

Packetlabs is a CREST-accredited, SOC 2 Type II attested cybersecurity firm specializing in impact-first penetration testing and red teaming. They provide comprehensive on-premise, cloud, application, API, mobile, OT, and AI/LLM penetration testing, as well as social engineering, purple teaming, and cyber maturity assessments, focusing on actionable findings with zero false positives and no outsourcing. Packetlabs serves enterprise clients across industries such as retail, finance, healthcare, and telecom, emphasizing North American data residency and OSCP-certified staff.

📋 Description

• Perform penetration testing of web applications, mobile applications, thick clients, and APIs • Conduct source code reviews and whitebox penetration testing to prove application flaw impact • Reverse engineer mobile and thick client applications • Chain application flaws into cloud and on-premises Active Directory infrastructure • Develop detailed reports on findings and remediations for impactful findings • Learn to debrief findings at technical and executive levels • Perform SAST and DAST on enterprise, SaaS, and custom in-house applications • Use scanners and validate or eliminate false positives • Potentially pursue limited lateral movement into infrastructure teams at the manager’s discretion

🎯 Requirements

• Experienced developer/application security tester • Solid working knowledge of C, C#, Python, Objective-C, Java, JavaScript, SQL, and AngularJS • Familiarity with XML, JSON, SOAP, REST, and AJAX • Understanding of AI/LLM weaknesses and flaws in applications • Extensive experience/expertise using an attack proxy such as Burp Suite • Preferred: 3–5 years of experience in penetration testing and consulting • Post-secondary college or university degree program graduate • At least two years of experience dealing with information security-related tasks • Professional qualification(s), one or more of OSCP, OSWE, BSCP • OSCP or Burp is mandatory for the organization • Strong understanding of OWASP in Web, API, Mobile, and AI/LLM • Experience using scanners and knowledge of validating and eliminating false positives • Ability to work initial after-hours schedules aligned with the Eastern Time Zone (Canada/US) team

🏖️ Benefits

• Initial onboarding and collaboration may involve after-hours work, with flexible scheduling as the role transitions to standard local hours • Immediate and continual offensive security training • Competitive compensation • Growth opportunity • Amazing team and working environment