Penetration Tester

About Synechron

Synechron is a global consulting firm dedicated to leveraging digital innovation to enhance businesses. With over 20 years of experience, the company specializes in Artificial Intelligence, Blockchain, Data Science, Digital Underwriting, mobile-first applications, and other cutting-edge technologies through its Synechron Labs. Operating in 20 countries with more than 14,000 employees, Synechron is recognized for its acclaimed workforce and client portfolio.

Role Overview

We are looking for a highly capable Penetration Tester to carry out comprehensive security evaluations across various environments including applications, networks, systems, cloud setups, and infrastructure. The role entails simulating cyberattacks, identifying vulnerabilities, and collaborating with relevant teams to enhance security frameworks.

Key Responsibilities

• Design and conduct penetration tests, vulnerability evaluations, and red-team operations.
• Evaluate security for web and mobile applications, APIs, networks, cloud platforms, internal infrastructure, and wireless systems.
• Utilize manual techniques alongside industry-standard tools to find and exploit security weaknesses safely.
• Conduct comprehensive threat modeling, reconnaissance, exploitation, privilege escalation, lateral movement, and post-exploitation activities.
• Confirm findings from automated vulnerability scanners through detailed manual testing.
• Document discovered vulnerabilities including their business impacts, proof of concept, risk assessment, and suggested remedial actions.
• Author technical and executive-level penetration testing reports that clearly communicate findings.
• Work collaboratively with engineering, IT infrastructure, application development, and compliance teams to support vulnerability remediation efforts.
• Perform retesting to ensure that vulnerabilities have been successfully addressed.
• Keep abreast of the latest threat landscape, attack methods, vulnerabilities, and security research.
• Contribute to the development and refinement of security testing processes, methodologies, and tools.
• Maintain confidentiality and adhere strictly to rules of engagement throughout all security assessments.
• Assist with security audits, compliance checks, incident investigations, and risk evaluations when requested.

Required Qualifications and Experience

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related discipline; comparable experience will also be considered.
• Minimum of five years of experience in penetration testing, vulnerability analysis, ethical hacking, or application security roles.
• In-depth knowledge of prevalent vulnerabilities and exploitation techniques, including OWASP Top 10, API security issues, and other common attack vectors such as injection flaws, cross-site scripting, and privilege escalation.
• Familiarity with assessing security risks like server-side request forgery, security misconfigurations, and insecure deserialization.

Additional Information

The position is offered on a contract basis and requires onsite presence in Sydney, New South Wales, Australia.