We’re BDO, a global professional services firm connected to local markets. Our people work together to provide specialist expertise, helping businesses achieve their goals.
We inspire others, to go further. We create together, to reach higher. We build trust, to lead purposefully.
Whether you're building your future or starting your career with us, you won’t do it alone. From creating solutions for our clients to building careers for our people, we shape what matters, and that’s where you come in.
About the Role
As a Penetration Tester, you will deliver high-quality security assessments across web applications, infrastructure, cloud environments, and critical systems such as sensitive government assets and critical infrastructure. This role is ideal for individuals with a solid foundation in penetration testing who are ready to take on more responsibility, contribute to client-facing work, and support the growth of junior team members.
As part of BDO’s Cyber Team, you will have the opportunity to work on high-impact, complex projects that grow your skills and career - backed by the trust of clients with the most critical and sensitive assets.
At BDO, we don't just hire talent, we invest in it. We are committed to your long-term growth and will support your journey with tailored training, certifications and the resources you need to grow.
Key Responsibilities:
- Plan and execute penetration tests on web applications, networks, and cloud platforms.
- Document technical findings and produce clear, client-ready reports with actionable remediation guidance.
- Participate in client debrief sessions, explaining technical issues in a business-friendly manner.
- Collaborate with engagement leads and project managers to ensure high-quality, timely delivery.
- Stay current with evolving threats, attack techniques, and security trends.
- Contribute to internal knowledge sharing and may assist in peer review or mentoring junior testers.
- Support the development of tools, scripts, and automation for common testing activities.
About You
Our ideal candidate has around 2-3 years of hands-on penetration testing experience with proficiency in tools like Burp Suite, Nmap, and Metasploit.
Combined with:
- Strong understanding of OWASP Top 10, network protocols, and operating system security principles.
- Relevant certifications and/or demonstrated success in online platforms such as but not limited to, HackTheBox and PentesterLab.
- Experience testing Active Directory, APIs, or mobile applications.
- Familiarity with scripting in Python, PowerShell, or Bash for automation and basic knowledge of cloud security (AWS, Azure, or GCP).
- Exposure to vulnerability management, threat modelling, or secure coding practices.
- Ability to write clear and concise documentation and reports.
Why BDO?
Working for BDO you will be part of a growing and market leading professional services firm.
Our national and global footprint provides our people with opportunities to work on interesting client engagements, across diverse industry sectors and services.
Our open and collaborative culture ensures access to Partners and professional mentors, to guide and accelerate your professional career, across a wide array of career pathways.
We provide our people with various health and wellbeing, social, financial, and professional development benefits to help realise what’s possible.
Participate in fitness challenges or take advantage of exclusive discounts to corporate health insurance, gym memberships and wellness facilities via our BWell program. Access benefits such as travel perks, retail discounts, employee referral rewards, study, and professional development support.
Our leave options cater to the unique needs of our people; and include enhanced family support, cultural and religious leave, and options to purchase additional leave. You can also give back and get involved in community initiatives via our BCaring program.
With a strong focus on learning and growth, we provide on the job training and formal development programs to help you succeed in your role and develop your skills and experience.
Our culture is underpinned by our core values (One, Bold, Human, Heart and Strive).
We are proud to be recognised as an Inclusive Employer for 2025-2026 by Diversity Council of Australia and a 2024-2025 Employer of Choice for Gender Equality by the Workplace Gender Equality Agency (WGEA).
BDO is committed to inclusive and accessible recruitment practices. If you require any reasonable adjustments to support your application or interview process, we encourage you to contact our Talent Acquisition team at [email protected]
Skills Required
- 2-3 years hands-on penetration testing experience
- Proficiency with Burp Suite, Nmap, and Metasploit
- Strong understanding of OWASP Top 10, network protocols, and operating system security principles
- Ability to write clear, concise technical documentation and client-ready reports
- Relevant certifications and/or demonstrated success on platforms such as HackTheBox and PentesterLab
- Experience testing Active Directory, APIs, or mobile applications
- Familiarity with scripting in Python, PowerShell, or Bash for automation
- Basic knowledge of cloud security (AWS, Azure, or GCP)
- Exposure to vulnerability management, threat modelling, or secure coding practices
What We Do
BDO is a trusted adviser to clients seeking audit, tax and advisory services. As one of the world’s leading audit and accounting organisations, we have clients of all types and sizes from large corporate organisations to private businesses, entrepreneurs and individuals across an array of industry sectors. At BDO, we are guided by our values that are the foundation of what we deliver: IDEAS | PEOPLE | TRUST. This is about delivering ideas and advice that create value; quality-driven people who are motivated by providing exceptional client service; and being trusted to get the job done. Talk to us today.
