Penetration Tester

We provide leading offensive security services to some of the best companies around. Our company has grown from 0 to one of the most respected specialist Offensive Security providers in the country over the past four and a half years. We have achieved this by building an awesome team and now we want to find the next person.

To summarise our criteria when hiring in one sentence:

• We want people who can hack

What does that look like:

• Education/Experience - if you have it great (Engineering, Computer Science or similar are preferred) but refer to the point above for our main criteria.

• Certifications - if they are well regarded include this in your application.

• Self Learning - do you have an active GitHub account (two thumbs up!) - have you written blog posts about your own research or other cool bugs you've come across (two thumbs up!) - do you actively participate in CTF's, BB's, PentesterLab, HTB and other activities in your free time (two thumbs up!). We want people who are passionate about security and technology and can show it.

If you're interested in working with us and meet the criteria above, we want to chat. We have people on our team who have backgrounds in Software Engineering, System Admin and Pen Testing to name a few.

This position is for junior consultant through to a mid level consultant. So how do we determine if you meet the main criteria?

Our interview process consists of three parts:

• First, we'll meet and chat informally about your background and what your interests are

• Second, to prove your technical skills, we'll give you access to our lab environment, known as the Dojo. This is about showing us that what you said in the first interview and CV is backed up

• Thirdly, we'll do a final technical interview regarding the results of the lab and how you solved certain problems. This shows if you understood the challenges and can explain your process

We provide generous perks, access to cutting-edge technology and top of the line equipment. Plus, we offer a training budget to cultivate your skills and a dedicated research time (usually one week every 5 weeks) for you to work on whatever interests you. Check out our blog for some of our recent projects: https://tantosec.com/blog/.

Our team are regular presenters at meetups and conferences across the world. We'll have six talks at the upcoming BSides Canberra. If you want to grow your career in the Offensive Security industry this is the place to do it. You'll get experience working with some of the most recognised organisations in the country from sectors like financial, technology, transport and critical infrastructure.

The work we do covers penetration test, adversary simulation and social engineering. Our team is building and using AI to enhance the work we do, any experience in this field will be highly regarded.

Our offices are a great place to work, but we also offer the opportunity to work full-time from home (anywhere in Australia)! The positions are open for people with working rights in Australia and we have offices in Sydney and Melbourne if that is your thing. Check out https://tantosec.com/blog/2025/12/tantosec_wrapped_2025/ for what a year in the life of Tanto entails. Including being surrounded by 'giga-nerds' in a talented and supporting environment [taken from real quotes on the blog if you need receipts.]

Salary offers are determined by your experience and the results of your technical interview. These may range from A$90k to A$130k + super annually.