Break things. Understand them. Make them safer.
What you'll do
- Think like an attacker, not follow a checklist
- Test web applications, internal networks, and Active Directory environments
- Map systems, find gaps, exploit them, and understand impact
- Translate findings into clear, actionable guidance for clients
- Explain technical results (e.g., domain admin access) and remediation steps
The team
- Diverse backgrounds: self-taught, infrastructure, development, consulting, CTFs, home labs
- Independent, heads-down work with minimal micromanagement
- Collaboration when it adds value: sharing ideas, second opinions, joint work on complex tasks
- No expectation of constant meetings or being "on" all day
- Most people here didn't see themselves in a corporate environment either
About you
- Curious and self-driven; enjoy figuring things out without step-by-step instructions
- Willing to go deep to uncover what others miss
- Not just process-following; look for gaps beyond standard methodologies
- Able to clearly communicate findings and their significance to clients (client-facing role)
- Extroversion not required; focus on thinking and output
How you'll work
- Hybrid model: remote testing with on-site client visits as needed
- Exposure across web/application testing, internal networks, Active Directory, and advanced attack simulation
- Real client work (not only controlled labs)
- Freedom to contribute to how engagements are run
About Orro
- Operates across cloud, cyber, networks, and collaboration
- Serves some of Australia's most recognised organisations
- Cyber team focuses on practical, real-world security — no box-ticking
Imported from Orro Pty Ltd’s job posting on orrogroup.teamtailor.com. Apply sends you to the original listing.