At Thales, we know technology has the ability to make our world more secure, sustainable, and inclusive – and that it’s all driven by human intelligence.
Because it takes human intelligence to build and power the systems and solutions that people depend on every day. So we stay curious and make space for diverse points of view. We share what we know and we challenge what’s possible.
From manufacturing and engineering to cybersecurity and space, we’re driving progress in some of the world’s most important industries – and working together to build a future we can all trust.
Our Benefits
In addition to interesting, engaging opportunities that impact at scale, and ongoing personal and professional development opportunities, Thales Cyber can offer you:
- Competitive remuneration structure
- Hybrid and flexible working options under the Thales Flex program
- Paid parental leave and family support through Parents at Work
- The day off on your birthday each year
- Novated Lease options
- Ongoing personal and professional development opportunities
- Sonder Wellbeing & Support Partner
Our Team
Thales delivers cybersecurity products and services that keep people and assets safe, giving organisations confidence in the security of their digital journeys. Our solutions are deployed in 148 countries, helping governments to maintain sovereignty and organisations to preserve their strategic autonomy.
Thales is a global leader in cybersecurity, no.1 in data security with more than 6,000 experts and developers worldwide. We bring trust and resilience to key industries including finance, health, retail and manufacturing, as well as critical sectors such as aerospace, defence, critical infrastructure and space.
Your Role
Join our Offensive Security team delivering complex, real-world engagements across critical infrastructure, defence, government and enterprise clients.
In this permanent full time position based in our Barangaroo office, this is an opportunity to go beyond traditional web application testing and gain exposure to internal network assessments, Active Directory environments, physical security testing, social engineering and adversary simulation activities.
For this role, we are open to a Mid or a Senior to to join our team.
Why Join Us
- Interesting and challenging work across critical infrastructure and defence sectors
- Exposure to physical security, social engineering and advanced offensive security engagements
- Strong engineering-led culture with experienced practitioners
- Boutique team environment backed by a global cybersecurity and technology organisation
- Access to international experts, global research teams and AI innovation labs
- Supported career development, mentoring and certification pathways
What You'll Do
- Conduct penetration testing across web, API, infrastructure and cloud environments
- Perform internal network and Active Directory assessments
- Support or lead physical security and social engineering engagements
- Execute assumed breach, privilege escalation and lateral movement scenarios
- Produce high-quality technical reports and present findings to clients
- Contribute to offensive security tooling, automation and methodology improvements
- Mentor junior team members (Senior level)
What We're Looking For
Mid-Level
- Developed experience with penetration testing or offensive security experience
- Experience with web, API or infrastructure testing
- Strong desire to develop skills in internal network, physical and social testing
Senior Level
- Demonstrated hands-on penetration testing experience
- Strong capability across internal network, Active Directory, web, API and cloud assessments
- Experience leading engagements and mentoring consultants
- OSCP or equivalent highly regarded, but not essential
- Advanced certifications such as OSCE3, OSEP, OSED or CRTO are highly valued
If you're looking for technically challenging work, the opportunity to broaden your offensive security skills, and a team that values technical excellence, we'd love to hear from you.
Australian Defence Roles & Security
A Defence security clearance is required for this role, applicants must be Australian citizens and eligible to obtain and maintain an appropriate clearance.
Additional information with regards to clearances is available from the Australian Government Security Vetting Agency website http://www.defence.gov.au/AGSVA/. In some cases, individuals who hold a current clearance from a foreign government may be eligible to have this clearance recognised by the Australian Government and be eligible for this role. The Australian Defence Trade Controls Act (DTCA) is applicable and as such, your nationality may be a factor in determining your suitability for this role.
We Encourage You to Apply
After you have applied, you will receive an email acknowledging your application. We’ll then provide a personalised experience for suitable applicants as we progress through the selection and assessment process. Prior to being offered employment, you will be required to complete pre-employment checks, including police and medical checks where applicable.
It’s easy to dismiss the perfect opportunity if you don’t see yourself as the perfect fit. If this role feels right – no matter your background or personal circumstances – please introduce yourself or join our community. We’re committed to supporting a diverse workplace, and that starts here.
We’re proud to be endorsed by WORK180 as an Employer for All Women, but we know there’s always more we can do. We’ll continue to foster industry partnerships, employee resource groups (ERGs) and development opportunities to make Thales a genuinely equitable employer, for everyone.
Read more about our WORK180 endorsement.
Skills Required
- 4+ years hands-on offensive security or penetration testing experience
- Strong capability across web and API testing, internal network/Active Directory assessments, external infrastructure and cloud
- Experience designing and running advanced assessments (assumed breach, phishing-led or scenario-based tests)
- Deep familiarity with OWASP methodologies and ability to adapt them to complex environments
- Strong working knowledge of the MITRE ATT&CK framework and use in attack scenario design
- Ability to build and modify tools, scripts and automation to increase testing efficiency
- Experience managing client relationships, scope changes, and delivering clear technical and executive reports
- Experience leading engagements, mentoring and providing feedback to junior consultants
- Specialist strength in at least one niche area (e.g., mobile, OT, red teaming, application security code review)
- Must be an Australian citizen and eligible to obtain and maintain an appropriate Defence security clearance
Thales Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Thales and has not been reviewed or approved by Thales.
-
Retirement Support — Retirement plans with employer contributions and matches, profit sharing, and share purchase opportunities are emphasized across multiple regions. These elements are positioned as competitive components of total rewards.
-
Leave & Time Off Breadth — Generous PTO that increases with tenure, paid holidays, and paid military, maternity, and paternity leave are described. This breadth supports work–life balance across locations.
-
Flexible Benefits — Hybrid work options, flexible schedules, and parental supports such as childcare benefits and leave for sick children are available in several markets. Flexibility is presented as a core part of the employee experience.
Thales Insights
What We Do
Thales is a global high technology leader investing in digital and “deep tech” innovations – connectivity, big data, artificial intelligence, cybersecurity and quantum technology – to build a future we can all trust, which is vital to the development of our societies. The company provides solutions, services and products that help its customers – businesses, organisations and states – in the defence, aeronautics, space, transportation and digital identity and security markets to fulfil their critical missions, by placing humans at the heart of the decision-making process.
