Junior Cyber Security Consultant (Penetration Testing)
Remote | Full Time | Ideally WA-based, but we’re flexible
Refactor are representing a boutique cyber security consultancy who are, frankly, legendary. They’ve built a reputation for world-class work, picked up awards along the way, and they’re just getting started.
We are on the hunt for a Cyber Security Consultant / Penetration Tester. Someone who has a passion for not only the cybersecurity industry but also doing things in the right way, surrounded by good humans.
You’re not the type who likes your work to collect dust in a report no one reads. You want to break things, find the holes, fix the holes — and do it knowing your work is making a genuine difference to people, businesses, and the planet.
We’re looking for an OSCP-certified Penetration Tester to join a team that’s doing cybersecurity differently. This isn’t just about billable hours and box-ticking — this is about delivering world-class security work while giving back.
10% of their profits go directly to high-impact charities, so every client win, every test, and every project has a ripple effect beyond the bottom line
Onto what you will be doing in a sec, first… why should you work here? Well here is why:
Perks & Impact:
- Impact that matters – They are also Australia’s first B Corp certified cyber security company, an independent attestation to their commitment to caring for their people, community, and planet.
- Remote-first flexibility – generous home office setup + co-working access in 750+ locations worldwide.
- Giving back: they believe in making the world a better place & back this up by donating 10% of our profits to high-impact charities with tangible results, so you know every day you’re making a difference.
- A culture you’ll want to stick around for – officially recognised as a Great Place to Work, and highly commended in the Australian Women in Security Awards.
- Training budget + leave – courses, certs, books, conferences… you choose.
- Variety – from startups to critical infrastructure, you’ll get to work on some of the most interesting and sensitive security challenges in the country.
- Support for you as a human – free counselling, mental health support, and life coaching through our EAP.
Convinced yet? I thought so, well here is the scoop on your daily role…
What you’ll be doing:
- Hacking stuff (legally) — web apps, APIs, mobile apps, cloud, infrastructure, wireless networks.
- Digging into source code and making security tools sharper and smarter.
- Producing clear, quality reports clients actually understand.
- Staying sharp — training, certs, conferences, the lot (we cover it).
- Pitching in across other areas like security architecture, GRC, and awareness training if that’s your jam.
What you’ll need to bring:
- OSCP (must have) and ideally other advanced certs (OSEP, OSWE, OSWA, OSED, CRTO etc – but optional
- Solid knowledge of web application security (HTTP, OWASP Top 10, etc.)
- Skills in at least one scripting/programming language (Python, Ruby, Java, JavaScript, Go, Rust)
- Analytical thinking, problem-solving chops, and strong communication skills
- Australian citizenship or PR
- A good all-round person who has a genuine passion for making the world a better place, not just a quick buck
If you want to be part of a team that delivers serious technical work without the ego, makes a measurable difference in the world, and gives you the flexibility to work where and how you do your best work — we should talk.
James Farrey
Founder & Director
#SCR-james-farrey