Senior Analyst - Pen Testing

Location: Sydney, NSW, AU, 2000

Company: McGrathNicol

Division: Advisory

Department: Cyber

Employment Type: Full Time Permanent

Application Closing Date: 31 December 2026

About Us McGrathNicol is an independent professional services firm specialising in Cyber, Deals, Forensic, Performance, Restructuring, and Risk & Compliance. For more than 20 years, we have supported organisations to navigate critical moments, from growth and transformation through to financial stress and uncertainty, across the private, public and not-for-profit sectors. Guided by our values – Understanding, Commitment and Impact – we are client-focused, collaborative and committed to creating an environment where our people can do their best work and continue to grow their careers.

The Opportunity We are seeking a skilled and motivated Senior Analyst - Offensive Security to join our growing team. This role is ideal for someone with a strong hands-on technical background in offensive security, a passion for identifying vulnerabilities, and an interest in continuing to develop their capability across a broad range of testing disciplines. The successful candidate will also contribute to the development of junior team members by sharing practical knowledge and experience.

You will deliver penetration testing engagements across a variety of environments, including infrastructure, web applications, cloud platforms, and operational technology (OT). Working with experienced team members and engagement leaders, you will help clients understand and address security weaknesses to strengthen their security posture and resilience.

Key Responsibilities

• Deliver offensive security engagements, including penetration testing and supporting activities for red team and threat emulation exercises.
• Perform hands-on testing, analyse technical weaknesses, validate risk, and develop clear, practical remediation recommendations.
• Apply strong working knowledge of enterprise technologies, including Microsoft 365, Azure, AWS, GCP, and hybrid infrastructure, to identify and assess security weaknesses.
• Conduct code reviews as part of application security assessments, identifying vulnerabilities and providing practical secure development guidance.
• Prepare high-quality technical reports and communicate findings clearly to both technical and non-technical stakeholders.
• Collaborate with engagement managers and senior team members to deliver work on time, within scope, and to a consistently high technical and professional standard.
• Support testing preparation, evidence management, and quality assurance activities as required.
• Share knowledge with junior team members and contribute to the continuous improvement of tools, methodologies, and internal guidance.

About You

• At least 3 years of hands-on penetration testing or closely related offensive security experience.

• Strong knowledge of offensive security methodologies, tools, and frameworks, such as MITRE ATT&CK, OWASP, and NIST.

• Demonstrated hands-on capability in at least two of the following areas:

• Web application and API testing

• Mobile application testing

• Thick client testing

• Internal and external infrastructure testing

• Cloud security assessments

• Red team operations and adversary simulation

• Experience using scripting and automation to support security testing, such as Python, PowerShell, or Bash.

• Familiarity with OT/ICS environments and protocols is desirable.

• Relevant certifications, such as OSCP, OSWE, CRTP, HackTheBox CPTS, CRTO, CREST CRT, or CREST CCT, are an advantage.

• Strong written and verbal communication skills, including the ability to explain technical findings and remediation actions clearly.

• Ability to work independently, contribute effectively within a team, and manage competing engagement priorities.

Why Join Us? At McGrathNicol, you’ll thrive in an empowering environment where your expertise drives real impact. We offer a competitive annual bonus program, alongside exceptional training and career development opportunities. Our inclusive culture fosters growth through personalised mentorship. You’ll also benefit from comprehensive support such as 26 weeks parental leave, additional leave options, employee assistance, health and wellbeing programs, and opportunities for social and community engagement. Join us and be part of a team that values your contributions and supports your success.

Interested? To apply for this exciting opportunity please click ‘Apply’ below. If you would like further information, please contact our HR team via [email protected].