{"id":522623,"url":"https://alion.io/job/triskele-labs-offensive-security-consultant","title":"Offensive Security Consultant","company":{"id":60634,"name":"Triskele Labs","domain":"triskelelabs.com","url":"https://alion.io/company/triskele-labs","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Melbourne, Australia","Perth, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"Red Teaming","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-09-07T00:00:00Z","employer_posted_date":"2026-09-07","last_verified_at":"2026-10-29T14:10:01Z","board_verified":true,"closed_at":null,"days_open":52,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":52},"description":"Triskele Labs is seeking an experienced offensive security consultant (penetration tester) to join our Offensive Security practice. We are an Australian-owned and operated cyber security firm delivering sovereign security services to clients across Australia, including managed detection and response, digital forensics and incident response, offensive security, and governance, risk and compliance services.\nOur Offensive Security team operates within a CREST-accredited environment, providing clients with confidence that engagements are delivered to recognised industry standards by skilled consultants using mature, repeatable methodologies. This role is suited to someone who values technical excellence, trusted client relationships, and contributing to a sovereign Australian cyber security capability.\nThe Offensive Security Consultant will deliver penetration testing engagements end to end, from set-up and information gathering, execution, through to reporting and close-out. You will test web applications, APIs, mobile applications, thick client applications, internal and external infrastructure, cloud environments, wireless networks, and modern attack surfaces, working to established methodologies and recognised industry frameworks. You will manage client communication throughout each engagement and produce reports that are accurate, practical, and useful to both technical and executive audiences.\nRequirements\nKey Responsibilities:\nExecute penetration tests across web, mobile, thick client applications and APIs, internal and external infrastructure, cloud environments, AI/LLM systems, and wireless networks.\nContribute to red team, purple team, adversary simulation, and social engineering engagements.\nProduce comprehensive engagement reports detailing vulnerabilities, impact, technical detail, risk ratings, remediation complexity, and recommendations.\nContribute to the continual improvement of testing methodologies, standard operating procedures, and internal tooling.\nMaintain current knowledge of security threats, tooling, standards, and frameworks.\nEssential Qualifications & Skills:\nA minimum of two years conducting penetration tests in a consulting or professional services environment, or demonstrable equivalent capability.\nOSCP certification, or an equivalent hands-on offensive security certification.\nDemonstrated capability across at least three service streams, such as application testing, infrastructure testing, social engineering, cloud security, offensive security operations, and configuration reviews.\nWorking proficiency with at least one scripting language.\nSound technical knowledge of networking, Windows and Linux operating systems, and common enterprise security controls.\nStrong written communication, with the ability to produce client-ready reports that require minimal revision.\nTertiary qualification in information security or a related information technology field, or demonstrable equivalent experience.\nFull Australian working rights.\nWillingness to undergo police checks and obtain a security clearance where required.\nDesirable Qualifications & Skills:\nAdvanced offensive security certifications.\nCREST Registered Tester (CRT), or the willingness and ability to achieve CRT within twelve months of commencement.\nHands-on experience with red teaming, adversary simulation, purple team exercises, source code reviews, and social engineering.\nExperience with AI tools, AI and LLM security testing, Hardware, OT & IoT Penetration Testing\nTool development, published research, CVEs, conference presentations, or bug bounty and CTF results.\nBenefits\nTeam culture is central to Triskele Labs and is one of the reasons we exist. We are a forward-thinking company that continually looks for ways to strengthen our culture and ensure we remain a destination employer. We regularly seek feedback from our team on how we can improve the work environment and team member experience at Triskele Labs.\nWe provide our team with a range of additional benefits, including:\nCommitment to training and development.\nAccess to a professional external Employee Assistance Program (EAP).\nSocial functions organised by our People & Culture Team.\nEnjoy a brand-new office located in the heart of Melbourne CBD.\nAccess to salary packaging options, novated leasing, and other benefits available through Triskele Labs’ employee benefits program.\nApplication Requirements:\nInclude both a CV and a cover letter addressed to Sarath Nair, Head of Offensive Security, to be considered for this role.\nWorking Arrangements:\nWork full-time, Monday to Friday, with hybrid and flexible arrangements. Out-of-hours work may be required to accommodate client change windows, and interstate travel may be required for onsite engagements.","description_format":"text","description_chars":4763,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Cybersecurity","Managed Security"],"lifecycle":[{"event":"open","at":"2026-09-08T02:52:13Z"}],"visa":[],"liveness":{"score":20,"band":"cold","label":"Long shot","p_open":1,"p_active":0.453,"p_room":0.45,"age_days":52,"expected_fill_days":27,"reasons":["conf:0","velocity","win:tail"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/triskele-labs-offensive-security-consultant","json_url":"https://alion.io/job/triskele-labs-offensive-security-consultant.json","meta":{"generated_at":"2026-10-29T16:36:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24731,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":60634},"rest":"https://alion.io/mcp/rest/get_company?id=60634"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftriskele-labs-offensive-security-consultant"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftriskele-labs-offensive-security-consultant"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftriskele-labs-offensive-security-consultant"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/triskele-labs-offensive-security-consultant\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftriskele-labs-offensive-security-consultant"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":522623}},{"tool":"search_jobs","arguments":{"company":"triskelelabs.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":522623},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}