Senior Offensive Security Consultant Cyber Security

About us

Mantel is an Australian-owned IT Professional Services consultancy, focused on emerging technology to help advance our clients by leveragingAI, Digital, Cloud, Data & Security technology. We are a fully AI-enabled technology consultancy and the partner that bridges the gap between blue-sky ambition and practical steps to deliver value. Since our inception in November 2017, we have experienced remarkable growth across Australia & New Zealand and are honoured to be recognised as a Great Place to Work for 6 years in a row!

We hire smart and talented people and get out of their way. As a principle-based organisation, we have a flat structure with no hierarchy. By focusing on our five principles and not getting caught up in red tape, we trust you to get the job done!

Working in our emerging and growing cyber security capability allows you to work closely with clients across our teams. Our security capabilities span governance, risk and compliance (GRC, our Advisory capability), cyber engineering and offensive security. We enable large-scale cyber security initiatives for our clients and improve the protection of IT environments.

About the role

This position has at its core the delivery of high quality, technically advanced penetration tests against client systems including web applications, networks, cloud environments, and a variety of specialist technologies unique to specific industries.

You will be supporting client engagements, managing stakeholder relationships and delivering offensive security consulting projects. A strong background in software development, cloud security, and/or network security, is required, ideally with experience in other aspects of security operations.

The role requires a proven ability to think outside the box when conducting testing, along with an ability to provide high quality written and verbal communications to clients to explain the findings.

Your day to day

• Supporting both large scale and targeted penetration testing projects for enterprise customers
• Delivering a wide range of penetration testing projects including:
  • Web, mobile and desktop app testing
  • Network and Infrastructure Testing
  • WiFi Testing
  • Intelligence-Led Red Teaming
  • Segmentation Testing
  • Cloud environment security assessment
  • Insider threat testing/corporate network testing
  • Phishing campaigns
• Writing client reports detailing tests conducted, evidence of findings, recommendations arising, and delivering these reports via client presentations as required
• Providing offensive security experience and recommendation across a wide range of technologies and solutions, including conducting security reviews for:
  • Security Architecture and Design
  • Secure Coding
  • Security Testing
  • Software Development Life Cycle

What you'll need to be successful

• Development experience using Python, Java, Ruby, Perl, C, or C++
• Experience building, delivering and maintaining enterprise software
• Deep knowledge of network protocols and accompanying tools
• Experience in conducting penetration testing for enterprise clients, including techniques for managing client expectations and client experience, and managing the risk of delivery
• Excellent written and verbal communication skills including the ability to liaise with and influence diverse stakeholder groups
• Willingness to continually upskill; including learning new technologies and obtaining new certifications
• Bring a positive can-do attitude to the team, with a developer-friendly problem solving orientation (shifting security left)

Nice to have

• Relevant Industry certifications (i.e. OSWE, OSCP, CREST certifications etc.)
• Cloud experience or certifications (i.e. AWS/Azure/GCP, CCSK and others)
• Experience with cloud native technologies and solutions
• Hands-on experience implementing security solutions
• Experience working with risk management systems and reporting systems.

What you can expect from us

• You'll get all the tools you need to hit the ground running including a new phone, laptop & swag.
• We believe in unique experiences for all. Our My Deal program allows you to tailor your yearly plan, with the support of your Leader, to decide on what's most important to you. That might be extra professional development, extra annual leave, time to work on your side hustle, or something else completely different! One size does not fit all.
• Mantel is a certified Family Inclusive Workplace, which means we are committed to improving your wellbeing at work through leading practices on flexible work, parental leave, family care and family wellbeing
• A true investment in your AI-first career. We are a fully AI-enabled consultancy and provide you with the tools to lead. This includes access to the Mantel AI Gateway, our secure, centralised platform with multiple AI models, plus a dedicated monthly budget and a safe environment to experiment and innovate.
• You'll be genuinely supported by an organisation that cares about not only you but your family as well, Mantel offers Flexible Personal Leave options for those unplanned moments in life.
• We support a flexible hybrid approach to working which is guided by our principles; we trust each other to "make good choices" about the best workplace locations for the requirements of the project, role and client. This can change based on our client needs.
• We know you won't have one job for life. At Mantel, we believe in supporting our team to take their career in a direction that aligns with their passions. We have internal opportunities across Cloud, Data, Digital, Delivery & Security.
• Our elite partnerships are a direct result of our deep platform mastery. For you, this means you'll be working alongside teams with the highest levels of technical expertise and tackling the most complex, high-profile projects on the market. Check out our partner awards and recognitions here.

We value a diverse workplace and strongly encourage people from all backgrounds and minority groups to apply.