Find jobs
Pricing
Free Resume Checker
Blog
Sign in
Sign up
FIND JOBSPRICINGFREE RESUME CHECKERBLOGSIGN INSIGN UP
FT
FTI Consulting

Consultant, Cybersecurity, Sydney

SalaryA$85k – A$110k
LocationSydney, Australia
Work modeon-site
Typefull-time
SeniorityEntry
Experience1+ yrs
Company size10,000+ people
PostedSep 9, 2026 · 1mo ago
Verified live7h ago
At a glanceSummarised by Seekless from the posting.
Must have13
At least 12+ months of full-time professional experience in offensive security, incident response or a relevant and adjacent cybersecurity domain (consulting experience is preferred)
Cybersecurity, Computer Science, Information Systems, Information Technology, or an equivalent degree
A keen interest in cybersecurity, across either offensive or defensive domains, with a desire to progress a career within an international cybersecurity consultancy
Strong written and verbal communication skills, with the ability to produce clear and concise reports
Ability to work with senior team members and clients to solve complex cybersecurity scenarios, including during crisis situations
A strong work ethic, integrity, and a high level of professionalism
Industry certifications including or equivalent to OSCP, OSEP, OSWP, OSWE, CREST CRT, CRTP, CARTP and / or offensive security SANS certifications
Hands-on cybersecurity experience in incident response and threat hunting
Hands-on capability across a number of the following domains: Network and infrastructure penetration testing, Web and API application security testing, Active Directory and identity-focused attacks, Cloud security testing (AWS, Azure, and/or GCP), Endpoint security and EDR evasion techniques
Strong understanding of Windows and Linux operating systems
Strong understanding of Exploits, vulnerabilities, intrusion vectors, and malware
Strong understanding of Enterprise environments, including AWS, Azure (including Microsoft 365), and/or GCP
Strong understanding of Tactics, techniques, and procedures (TTPs) commonly employed by threat actors
Nice to have7
Scripting and automation skills (e.g. Python, PowerShell, Bash)
Experience with Active Directory, identity-focused attacks, or cloud security testing
Understanding of enterprise incident management and response processes
Have identified and published CVEs
Have developed open source offensive security tools
Have presented at offensive security conferences, such as BSides or SecTalks
International experience is a plus
Eligibility1
Unrestricted Australian working rights
Skills
Python
PowerShell
Bash
AWS
Azure
GCP
Windows
Linux
Active Directory
EDR evasion techniques
Endpoint security
Who We Are
FTI Consulting is the leading global expert firm for organizations facing crisis and transformation. We work with many of the world’s top multinational corporations, law firms, banks and private equity firms on their most important issues to deliver impact that makes a difference. From resolving disputes, navigating crises, managing risk and optimizing performance, our teams respond rapidly to dynamic and complex situations.
At FTI Consulting, you’ll work side-by side with leaders who have shaped history, helping solve the biggest challenges making headlines today. From day one, you’ll be an integral part of a focused team where you can make a real impact. You’ll be surrounded by an open, collaborative culture that embraces diversity, recognition, professional development and, most importantly, you.
Are you ready to make your impact?
About The Role
FTI Consulting is the leading global expert firm for organisations facing crisis, transformation and moments of truth. The Cybersecurity Practice within FTI Consulting is a leading provider of independent cyber and risk management advisory services with a core offering focused on (but not limited to) Cyber Readiness, Incident Response, Offensive Security, and Complex Investigations & Litigation.
We are seeking to appoint a Consultant – Cybersecurity (Incident Response & Offensive Security) to our cybersecurity practice in Sydney. This is a full-time role offering excellent career opportunities and professional development for future progression within the firm.
This is a high-impact consulting role suited to a cybersecurity professional who wants to work across both incident response and offensive security engagements, contributing to complex, high-stakes client matters.
We are seeking candidates who want to work on either offensive security only, incident response only, or a combination of both.
What You’ll Do
Work with clients to provide strategic and tactical advice that enhances their cybersecurity posture across both reactive and proactive engagements:
Incident Response & Investigations
•
Respond to complex cyber incidents, including ransomware, data breaches, malware infections, email compromises, insider threats, and other security breaches experienced by our clients.
•
Conduct in-depth investigations on various platforms and devices to identify the extent of compromise and potential threat actors.
•
Rapidly assess incoming incidents, coordinating with internal teams and clients to implement containment strategies and mitigate potential damages.
•
Utilise security tools, software, and methodologies to gather and analyse digital evidence, reconstruct incident timelines, and produce detailed assessments.
•
Generate clear and concise reports documenting investigative findings, analysis results, and recommended remediation actions.
•
Work closely with cross-functional teams, including Cybersecurity, Forensics, Legal and IT teams, to ensure well-rounded incident response efforts.
Offensive Security
•
Deliver penetration testing across corporate networks, cloud environments, and applications.
•
Execute adversary simulation activities aligned to contemporary threat actor TTPs.
•
Safely conduct exploitation, post-exploitation, and attack path analysis in enterprise environments.
•
Assess security controls and detection capability from an attacker’s perspective.
•
Translate technical findings into concise and approachable language for senior stakeholders.
•
Produce high-quality reports suitable for executive, regulatory, and litigation use.
Broader Responsibilities
•
Assist with and contribute to scoping discussions for cybersecurity engagements.
•
Support cyber incident response matters through attacker-centric analysis.
•
Support proposals, client presentations, and business development activity.
•
Stay current with the latest cyber threats, attack techniques, vulnerabilities, and threat actor trends.
•
Collaborate with multidisciplinary teams to deliver high-quality client outcomes.
How You’ll Grow
This is an excellent opportunity for a person with proven, hands-on cybersecurity experience to join a dynamic and growing cybersecurity team. With the ever-evolving cybersecurity landscape, the need for continuous professional development remains at the forefront and is fully supported.
You will gain exposure to both incident response and offensive security engagements, working alongside experienced practitioners on high-profile matters.
We are committed to investing in your development through on-the-job learning, mentoring, and professional certifications.
What You’ll Need to Succeed
•
Unrestricted Australian working rights
•
At least 12+ months of full-time professional experience in offensive security, incident response or a relevant and adjacent cybersecurity domain (consulting experience is preferred).
•
Cybersecurity, Computer Science, Information Systems, Information Technology, or an equivalent degree
•
A keen interest in cybersecurity, across either offensive or defensive domains, with a desire to progress a career within an international cybersecurity consultancy.
•
Strong written and verbal communication skills, with the ability to produce clear and concise reports.
•
Ability to work with senior team members and clients to solve complex cybersecurity scenarios, including during crisis situations.
•
A strong work ethic, integrity, and a high level of professionalism.
•
Industry certifications including or equivalent to OSCP, OSEP, OSWP, OSWE, CREST CRT, CRTP, CARTP and / or offensive security SANS certifications.
•
Hands-on cybersecurity experience in incident response and threat hunting. International experience is a plus.
•
Hands-on capability across a number of the following domains:
•
Network and infrastructure penetration testing
•
Web and API application security testing
•
Active Directory and identity-focused attacks
•
Cloud security testing (AWS, Azure, and/or GCP)
•
Endpoint security and EDR evasion techniques
•
Strong understanding of:
•
Windows and Linux operating systems
•
Exploits, vulnerabilities, intrusion vectors, and malware
•
Enterprise environments, including AWS, Azure (including Microsoft 365), and/or GCP
•
Tactics, techniques, and procedures (TTPs) commonly employed by threat actors
•
Desirable
Nice to have
•
Scripting and automation skills (e.g. Python, PowerShell, Bash)
•
Experience with Active Directory, identity-focused attacks, or cloud security testing
•
Understanding of enterprise incident management and response processes
•
Have identified and published CVEs
•
Have developed open source offensive security tools
•
Have presented at offensive security conferences, such as BSides or SecTalks
How to Apply
When applying, please include your updated resume. The application process will be open from Monday, 7 September to Tuesday, 9 October.
FTI Consulting acknowledges that we stand on the lands of the First Nations peoples and would like to pay our respects to Elders past and present. We extend solidarity and hope for a future where all are afforded justice, dignity and peace.
FTI Consulting is an equal opportunity employer and does not discriminate on the basis of race, color, national origin, ancestry, citizenship status, protected veteran status, religion, physical or mental disability, marital status, sex, sexual orientation, gender identity or expression, age, or any other basis protected by law, ordinance, or regulation.
Compensation
Minimum Pay: $85,000
Maximum Pay: $110,000
Compensation Disclosure: The compensation range reflects potential base salary for the role and is inclusive of Superannuation. Determination of actual salary is based on a combination of relevant factors such as market considerations, business needs, and an individual’s location, skills, level of experience and qualifications.
More roles at FTI Consulting
Graduate Consultant, Economic & Financial ConsultingSenior Consultant, eDiscovery – Technology ConsultingDirector , eDiscovery- Technology ConsultingJunior Corporate Operations Assistant, MelbourneSenior Consultant, Public Affairs - Industrials
Seekless
Seek less: one search across companies' own career pages, instead of a dozen job boards.
Product
Find jobsCompaniesPricingFree Resume Checker
Company
AboutBlog
Legal
PrivacyTermsCookies
© 2026 SEEKLESS. ALL RIGHTS RESERVED.BUILT WITH CARE