Senior Analyst - Penetration Testing

About McGrathNicol

McGrathNicol is a specialist professional services firm offering expertise in Cyber, Deals, Forensic, Performance, Restructuring, and Risk & Compliance. With over two decades of experience, we assist organizations across private, public, and not-for-profit sectors through critical phases such as growth, transformation, and financial uncertainty. Our values—Understanding, Commitment, and Impact—guide us to prioritize client focus, teamwork, and a supportive environment that promotes professional growth.

Role Overview

We are seeking a highly capable and motivated Senior Analyst with a technical focus on offensive security to join our expanding Cyber team. This position is perfect for those passionate about identifying vulnerabilities and interested in enhancing their skills across diverse testing areas. You will also play a key role in mentoring junior colleagues by sharing practical knowledge.

Key Responsibilities

• Lead offensive security projects including penetration tests, red teaming, and threat simulation exercises.
• Conduct practical security testing to analyze weaknesses, validate risks, and offer actionable remediation guidance.
• Utilize strong understanding of enterprise technologies such as Microsoft 365, Azure, AWS, Google Cloud Platform, and hybrid systems to identify security gaps.
• Perform code reviews during application security assessments identifying vulnerabilities and advising secure development practices.
• Produce detailed technical reports and effectively communicate findings to both technical experts and business stakeholders.
• Collaborate closely with engagement managers and senior team members to ensure timely, scoped, and technically excellent deliverables.
• Assist with preparation for testing, manage evidence, and perform quality assurance activities as necessary.
• Contribute to the continuous improvement of internal processes, tools, and methodologies while supporting junior teammates.

Candidate Profile

• Minimum of three years’ practical experience in penetration testing or a related offensive security role.
• Strong familiarity with offensive security frameworks such as MITRE ATT&CK, OWASP, and NIST.
• Demonstrated hands-on proficiency in at least two of these areas: web application and API testing, mobile app testing, thick client evaluations, internal and external infrastructure assessments, cloud security audits, or adversary simulation and red team operations.
• Experience automating security testing tasks using scripting languages like Python, PowerShell, or Bash.
• Knowledge of operational technology (OT) and industrial control system (ICS) environments and protocols is preferred.
• Certifications such as OSCP, OSWE, CRTP, HackTheBox CPTS, CRTO, CREST CRT, or CREST CCT are beneficial.
• Strong communication skills, with the ability to clearly articulate technical results and remediation steps to varied audiences.
• Capability to operate independently as well as collaboratively, managing multiple project priorities effectively.

Benefits and Culture

At McGrathNicol, you will work in a culture that empowers your expertise to make impactful contributions. We provide a competitive annual bonus scheme and invest in extensive training and career growth initiatives. Our inclusive environment offers personalized mentoring, 26 weeks of parental leave, additional leave options, employee support programs, health & wellbeing activities, and opportunities for social and community engagement.

Additional Details

Location: Sydney, NSW, Australia
Employment Type: Full-time permanent
Application Deadline: 31 December 2026