Penetration Tester

About HackLabs

HackLabs is a prominent Australian information security consultancy accredited by CREST, specialising in offensive security services. As a boutique firm, it excels in Penetration Testing, Social Engineering, and Red Teaming for diverse industry clients. Its hallmark is innovation, delivering outstanding results and demonstrating deep technical expertise within the cybersecurity sector in Australia.

Role Overview

The Penetration Tester role involves joining HackLabs’ offensive security team to perform detailed and complex security assessments that emulate real attacker actions.

Key Responsibilities

• Plan, define scope, and conduct advanced penetration tests across multiple domains such as web, API, mobile apps, external and internal networks, wireless networks, and red team simulations.
• Identify, exploit, and navigate deep vulnerabilities to evaluate potential impact and data exposure.
• Develop clear, detailed technical reports that explain vulnerabilities, exploitation paths, and suggest practical remediation for both technical teams and executive stakeholders.
• Support refinement and innovation of proprietary testing approaches and tools to maintain industry leadership.

Required Skills and Experience

• Proven background in penetration testing or red teaming engagements.
• Hands-on expertise with web application, mobile application, and network penetration testing.
• Comprehensive understanding of security frameworks such as OWASP, MITRE ATT&CK, and NIST standards.
• Proficiency in security tools including but not limited to Burp Suite Professional, Metasploit, Nmap, and tools from Kali Linux.
• Excellent written and oral communication skills capable of translating technical findings for non-specialist audiences.

Why Work at HackLabs?

• Opportunity to engage with innovative and continuously evolving offensive security techniques and research.
• Participation in challenging, high-profile projects involving external networks, mobile applications, wireless security, and social engineering.
• Collaboration with a team of highly certified cybersecurity professionals (CREST CRT, OSCP, OSCE) fostering knowledge sharing and mentorship.
• Commitment to quality through adherence to rigorous standards such as OWASP Top 10, SANS CWE Top 25, and NIST SP 800-115.