Penetration Tester

Role Overview

This position involves approaching systems from the mindset of an attacker to uncover vulnerabilities and security gaps. The primary activities include testing web applications, internal network infrastructures, and Active Directory environments. The goal is to map out security loopholes, exploit them to assess risk, and then communicate findings in a clear, actionable manner to clients.

What To Expect

Your daily work will vary between focused individual testing and client-facing communications where you explain your methods and results. The team operates with autonomy, minimizing micromanagement while encouraging collaboration when encountering challenges or reviewing critical work.

Team Background

Members come from diverse backgrounds such as self-directed learning, infrastructure, development, consulting, and practical experience with Capture The Flag competitions and labs. Everyone shares a hands-on approach to learning and problem-solving.

Candidate Profile

Successful candidates will demonstrate curiosity, analytical problem-solving skills, and the capacity to work independently without following rigid procedures. Communication skills are essential for articulating discoveries and their implications effectively to clients.

Work Environment

The role supports a hybrid working model that balances remote testing and on-site client visits as required. This provides flexibility and real-world engagement with client systems rather than simulated environments.

About Orro Group

Orro Group specializes in cloud, cybersecurity, networking, and collaboration services for leading Australian organizations. Their cybersecurity team prioritizes practical security measures over compliance checking or theoretical exercises.