Overview
Penetration Tester Jobs in Sydney, New South Wales, Australia at Adactin
Title: Penetration Tester
Company: Adactin
Location: Sydney, New South Wales, Australia
Adactin Group is a 100% Australian-owned global IT consulting company, headquartered in Sydney. We are a trusted technology partner helping organizations drive end-to-end digital transformation through our deep expertise in Microsoft and AWS ecosystems, AI-powered Digital Engineering, and future-ready Quality Assurance.
Our managed delivery approach, backed by domain expertise, ensures successful outcomes for every project. At Adactin, we believe in the power of our people. We foster a dynamic and supportive environment where your career can grow alongside exciting projects that shape the future of technology. Join us, and be part of a team committed to innovation, excellence, and making a difference.
About the role –
Key Requirements
- CREST Certified (Mandatory)
- Proven experience conducting Web Application Penetration Testing
- Strong knowledge of OWASP Top 10 and web application security testing
- Experience testing Salesforce applications (highly desirable)
- Experience with SSO security testing (Okta, OAuth 2.0, SAML, OpenID Connect)
- Experience assessing REST APIs and authentication mechanisms
- Ability to perform both authenticated (insider) and unauthenticated (outsider) testing
- Experience identifying platform and cloud misconfigurations
- Strong technical reporting skills with executive and detailed technical findings
Scope of Testing
- Comprehensive web application penetration testing
- OWASP Top 10 validation
- Architecture vulnerability review
- Authentication and authorisation testing
- Session management
- Access control and privilege escalation
- API security testing
- Input validation and parameter manipulation
- SQL Injection
- Sensitive data exposure (PII)
- Administrative access controls
- Cookie/session attacks
- Security misconfiguration
- Known vulnerability assessment
- Third-party integration security
- Retesting after remediation
