This is a worked case study for a Penetration Tester migrating to Australia under ANZSCO 261317. Multiple pathways: Subclass 189, Subclass 190, Subclass 491 → 191, Subclass 186, Subclass 494 → 191, and Subclass 482.
For visa-by-visa context, see the 261317 pathway guide and the ACS skills assessment guide.
The case profile
Anonymised composite. 30-year-old Senior Penetration Tester, BSc Computer Science. 7 years professional career: 3 years junior pentest (web app focus), 3 years senior pentest (red team + cloud), 1 year team lead (boutique cyber consultancy). OSCP + OSCE + CRTO. Superior English. Family: spouse + one child under 18.
Side-by-side
| Path | Applicant cost | Employer cost | Wall-clock to PR | ACS required |
|---|---|---|---|---|
| 189 | AUD ~10,500 | AUD 0 | 12-18 months | Yes |
| 190 | AUD ~11,000 | AUD 0 | 12-18 months | Yes |
| 186 DE | AUD ~10,500 | AUD 5,540 | 6-12 months | Yes |
| 491 → 191 | AUD ~12,000 | AUD 0 | ~60 months | Yes |
| 494 → 191 | AUD ~12,000 | AUD 6,000-25,540 | ~60 months | Yes |
| 482 → 186 TRT | AUD ~17,000 | AUD 9,000-25,000+ | 30-36 months | Yes |
Things that frequently surprise people
CyberCX, Tesserent, Trustwave, Mandiant, NCC Group. Specialist cyber consultancies actively sponsor 482 / 186.
ASD-cleared work pays premium. Government-related pentest for cleared roles attracts substantial relocation packages — but typically requires PR / citizenship.
OSCP is the floor. Australian pentest hiring expects OSCP minimum; senior roles expect OSCE / OSEP / CRTO.
CREST CRT / CCT recognised. UK CREST-certified pentesters map cleanly to Australian roles.
Health examinations expire after 12 months.
Tax residency starts on arrival. See ATO residency rules before signing.
MARA registration is mandatory for paid migration assistance. Verify any agent at the MARA register.
