Triskele Labs is a cybersecurity firm and consultant that offers penetration testing, PCI compliance and security training.
Triskele Labs is a leading Australian cybersecurity firm, providing comprehensive offensive, defensive, and advisory services. They are the largest CREST Registered Penetration Testing company in Melbourne and one of the few boutique firms operating a 24x7x365 Security Operations Centre (SOC). Founded in 2014, Triskele Labs works with businesses of all sizes to understand their unique risks and craft tailored solutions to protect their data and systems around the clock. Their offerings range from penetration testing and PCI compliance to managed detection and response (DefenseShield) and security-as-a-service, ensuring a holistic approach to cybersecurity.
Triskele Labs fosters a culture where team members thrive, emphasizing outcomes-based working, flexibility, and continuous improvement. They are not a traditional 9-5 company; you have the autonomy to work anytime, anywhere, allowing you to achieve your best work. The team values open communication, with engineers often collaborating with designers and decisions happening transparently. A dedicated Social Committee organizes regular events, including weekly online yoga, ensuring team connection and well-being. They also offer an Employee Assistance Program for confidential support.
Triskele Labs' cybersecurity experts leverage industry-standard and customized tooling to identify security vulnerabilities. You'll work with tools like Burp Suite, Nessus, and various web application scanners, along with technology-specific tools for platforms like ASP.NET, PHP, and Java. Customization and scripting, primarily in Python, are integral to supporting testing objectives. Their DefenseShield service involves monitoring client systems 24x7x365 from an Australian-based SOC, utilizing professional Cyber Threat Intelligence to track new threats and develop customized detections. Engineers constantly improve internal documentation, templates, and testing processes, contributing to the ongoing maturity of their penetration testing practice.