• Build and maintain automated testing frameworks and tools • Act as a bridge between development and QA • Focus on preventive quality measures and integrate testing into CI/CD pipelines • Craft efficient and high-quality client code • Participate in planning and estimation efforts • Enhance and expand automation frameworks and practices • Lead the design and oversight of automated test cases • Collaborate with engineers, designers, and managers to drive client success • Participate in agile software development activities

Role Description Penetration Tester (Mid-Senior) | Full-Time | Remote (US) As a penetration tester on BreachLock's US Strategic delivery team, you'll execute manual, methodology-driven engagements across web applications, APIs, and internal networks — including assumed breach simulations — for enterprise clients. You'll work directly with delivery leadership, contribute to internal tooling and quality systems, and help raise the bar for the team around you. Key Responsibilities - Execute web application, API and mobile penetration tests with a focus on manual testing beyond automated scanning — business logic, authentication abuse, authorization flaws, and injection chains. - Conduct internal network assessments, external network assessments and assumed breach engagements, including Active Directory enumeration, lateral movement, privilege escalation, and post-exploitation. - Leverage frameworks including MITRE ATT&CK, PTES, and OWASP to structure assessments and findings. - Develop and contribute to internal tooling — automation scripts, reporting utilities, and workflow improvements using Python, Bash, or similar. - Participate in QA review cycles, providing structured feedback on findings, CVSS scoring accuracy, and report quality. - Mentor junior testers through technical guidance and finding review. - Collaborate with delivery leadership on scoping, client kickoff calls, and remediation guidance. Qualifications - 3–5 years of professional penetration testing experience in a delivery or consulting context. - Strong web application and API testing fundamentals — Burp Suite proficiency, OWASP Top 10 and beyond, authentication and session management testing. - Solid internal network assessment skills — AD enumeration, Kerberoasting, NTLM relay, ADCS misconfigurations, assumed breach methodology. - Proficiency in scripting and automation (Python, PowerShell, Bash). - Strong written communication — capable of writing clear, accurate, well-scoped findings independently. - Familiarity with PTaaS delivery models or platform-based reporting workflows is a plus. - US-based and eligible to work without sponsorship. Requirements - Experience with C2 frameworks (Cobalt Strike, Havoc, Sliver, or similar). - Active involvement in cybersecurity communities, research, or bug bounty programs. - Certifications such as OSCP, BSCP, CRTO, GWAPT, GPEN, or equivalent practical credentials. - Experience with SIEM platforms or EDR tools from an adversarial perspective. Benefits - Competitive compensation and performance-based equity opportunities. - Flexible work hours with hybrid remote options. - Opportunity to work with international cybersecurity experts. - Strong career progression in a rapidly expanding early-stage company. - Exposure to cutting-edge research, tools, and techniques in offensive security.

• Testing new features before release • Investigating and reproducing reported bugs • Confirming and verifying bug fixes • Exploring the product to find edge cases and unexpected behaviour • Working with developers to diagnose issues • Testing APIs and integrations where required • Helping flesh out tickets and clarify requirements before development • Creating work items and tickets in Azure DevOps • Reviewing and improving product guidelines and documentation

Role Description We are looking for a hands-on QA Tester who enjoys getting into a product, understanding how it works, and finding problems before customers do. This role will focus on functional testing, particularly within the first 6–12 months, across a complex SaaS platform as well as mobile web applications, Android and iOS/iPad environments. The system includes multiple user roles, permissions, billing, payments, accounts, and interconnected workflows. - Testing new features before release - Investigating and reproducing reported bugs - Confirming and verifying bug fixes - Exploring the product to find edge cases and unexpected behaviour - Working with developers to diagnose issues - Testing APIs and integrations where required - Helping flesh out tickets and clarify requirements before development - Creating work items and tickets in Azure DevOps - Reviewing and improving product guidelines and documentation Qualifications - Minimum 5 years of experience in software testing or QA - Experience with automation testing is a bonus - Fluent English written and spoken - Strong attention to detail Requirements - This is a remote role that will be set up as an independent contractor engagement. - To ensure alignment and transparency, successful candidates will be expected to: - Disclose any existing ongoing roles or client work - Reflect this engagement on their LinkedIn profile (clearly marked as “Independent Contractor”) Benefits - Compensation range: $1,500 AUD - $2,500 AUD / Monthly - Flexibility in managing your time - 100% remote work