Senior Offensive Security Consultant (Immediate Joining)

( )

Location: Philippines (Remote)

Employment Type: Full-time

Experience: 7+ Years (10+ preferred)

Client Base: Australia & International

Joining: Immediate / Within 30 Days Preferred

CypherLeap is a CREST-accredited cybersecurity consultancy delivering offensive security, governance, compliance and managed security services to organisations across Australia. We are seeking a Senior Offensive Security Consultant to independently deliver complex offensive security engagements for international clients while contributing to the growth of our offensive security capability.

• 7+ years of hands-on offensive security consulting experience.

• Demonstrated experience delivering services to international clients (Australian client experience highly desirable).

• Excellent spoken and written English.

• Ability to independently scope, execute and deliver offensive security engagements.

• Author of 50+ professional penetration testing reports.

• Strong client-facing consulting and presentation skills.

• Available to join within 30 days (immediate joiners preferred).

Key Responsibilities

• Lead penetration testing engagements from scoping through final reporting.

• Perform web, API, mobile, external, internal, Active Directory, cloud and wireless security assessments.

• Produce executive-quality reports requiring minimal review.

• Present findings to technical teams, CIOs, CISOs and executive stakeholders.

• Conduct remediation workshops and retesting.

• Support technical scoping, proposal development and effort estimation.

• Review work produced by junior consultants and provide mentoring.

• Contribute to the continuous improvement of CypherLeap's offensive security methodologies.

Research & Capability Development

• Research newly disclosed vulnerabilities (CVEs) and assess customer impact.

• Develop and validate proof-of-concept exploits where appropriate.

• Develop custom offensive security scripts, tooling and automation.

• Build and maintain internal attack labs for research and testing.

• Create reusable methodologies, playbooks and assessment checklists.

• Evaluate emerging offensive security techniques and technologies.

• Publish internal technical documentation and contribute to knowledge sharing.

• Where appropriate, contribute to technical blogs, whitepapers or security research.

• External & Internal Infrastructure Penetration Testing

• Active Directory Security Assessments

• Web Application & API Penetration Testing

• Mobile Application Security Testing (Android & iOS)

• AWS, Azure, Microsoft 365 & Entra ID Security Assessments

• Windows & Linux Privilege Escalation

• Kerberos Attacks & Lateral Movement

• Wireless Security Testing

• Red Team Exercises & Social Engineering

• Secure Configuration Reviews

• Container & Kubernetes Security (Desirable)

• Source Code Review (Desirable)

• OSCP

• OSEP

• OSWE

• PNPT

• CRTO

• CRTP

• CREST CRT/CCT

• GWAPT

• GXPN

• Demonstrated consulting experience is valued more highly than certifications.

• Work directly with international enterprise clients.

• Exposure to a broad range of technologies and industries.

• Remote-first working environment.

• Certification and professional development support.

• Opportunity to contribute to research, tooling and innovation.