What to Expect as a Penetration Tester, ANZSCO 261317
Cyber security is critical infrastructure in Australia, making Penetration Testers (ANZSCO 261317) highly sought after in the General Skilled Migration programme. Being on the Medium and Long-term Strategic Skills List (MLTSSL) means you are eligible for the 189, 190, and 491 visa pathways. However, the sheer volume of ICT professionals vying for a spot makes this a fiercely competitive space. You will need a robust points score to cut through the noise, particularly for the independent 189 visa.
Subclass 189
Skilled Independent
Recent trends indicate you generally need 85 to 95 points to be competitive for a 189 invite. It is the gold standard for independence, but extremely tough to secure.
→ Read our 189 guideSubclass 190
State Nominated (+5 pts)
Often a much more realistic option. States like NSW, VIC, and QLD frequently nominate cyber professionals with solid work experience.
→ Read our 190 guideSubclass 491
Regional (+15 pts)
If you are happy to settle outside the major capitals, the +15 points can be a game-changer. Excellent for graduates of regional universities.
→ Read our 491 guideComparing Your Options
| Subclass 189 | Subclass 190 | Subclass 491 |
|---|
| Nomination bonus | +0 | +5 | +15 |
| Target points | 90+ pts | 85+ pts | 75+ pts |
| Occupation list | MLTSSL | MLTSSL | MLTSSL |
| Level of competition | Very High | High | Medium/High |
| Assessing body | ACS | ACS | ACS |
Please remember that these target points are estimates based on recent SkillSelect trends. The Department of Home Affairs does not guarantee cutoffs, and state requirements evolve constantly.
→ Check our latest invitation round analysisGetting Your ACS Skills Assessment
You must secure a positive skills assessment before you can lodge an Expression of Interest (EOI).
The Australian Computer Society (ACS) handles Penetration Tester (261317) assessments.
| Assessing body | Australian Computer Society (ACS) |
| Official website | acs.org.au/msa |
| Typical wait time | Usually 8–12 weeks |
| Expected fee | AUD $530–$800 (pathway dependent) |
| Common pathway | Skills Assessment or Post-Australian Study |
| Baseline education | Bachelor degree or higher (with an ICT major) |
The "Skill Level Requirement Met" Date
It is vital to understand the ACS work experience deduction. ACS will generally deduct at least two years (and up to six years, depending on your qualifications) of your relevant work history to establish when you officially became "skilled". You can only claim PR points for the work experience gained after that specific date. We highly recommend factoring this in when calculating your points.
⚠ Watch your expiry dates: Your skills assessment needs to be valid on the day you are invited to apply, not just when you lodge your EOI. ACS assessments typically last for 2 years.
→ Read our deep-dive on ACS Skills AssessmentsState Nomination Options for Penetration Testers
State nomination gives you a welcome +5 points (190) or +15 points (491). Keep in mind that states regularly update their priorities.
| State | 190 Active? | 491 Active? | What to keep in mind |
|---|
| NSW | Yes | Yes | Typically offers a large ICT allocation but demands exceptionally high points and robust employment evidence. |
| VIC | Yes | Yes | Strong demand for cyber security, but you must navigate their ROI selection process first. |
| QLD | Yes | Yes | Be mindful of specific state criteria regarding local employment or studying in Queensland. |
| SA | Yes | Yes | Highly favourable towards South Australian graduates and those already working locally. |
| WA | Yes | Yes | Often listed on the General stream (WASMOL Schedule 1 or 2). Check current availability. |
| TAS | Check | Yes | Tends to favour local graduates and those with a long-term commitment to the state. |
| ACT | Yes | Yes | You will need to navigate the Canberra Matrix scoring system. |
| NT | Check | Yes | Strongly prioritises candidates already living and working in the Territory. |
Note: State occupation lists can change without notice. Always verify your eligibility directly on the official state migration websites.
Because the 189 visa is intensely competitive for ICT professionals, leaning into state nomination is often a smart, pragmatic strategy. Just ensure you are comfortable with the residency and work commitments required by each state.
How to Boost Your PR Points
If your score is hovering around 75 or 80, here are a few practical ways to elevate your application.
1. Master the English Test
Securing Superior English (IELTS 8.0 or PTE 79) gives you an extra 10 points over Proficient. For many Penetration Testers, this leap is the defining factor in reaching competitive cutoffs.
→ English points guide2. Leverage State Nomination (190)
If the 189 feels out of reach, state nomination (190) is your strongest ally. It adds 5 points immediately and places you in a pool where the state actively selects you based on local economic demand.
→ 190 visa guide3. Claim Partner Skills & NAATI
Do not overlook the 'extras'. A skilled partner can add up to 10 points. Passing the NAATI CCL test (if you are bilingual) adds another solid 5 points.
→ Partner points guide| Strategy | Points Gained | Time Required | Reform Risk |
|---|
| Superior English (if at Proficient) | +10 | 2-6 months | Low |
| State nomination (190) | +5 | 2-12 weeks | Low |
| Regional sponsorship (491) | +15 | 2-12 weeks | Low |
| Australian work experience (1 more year) | +5 | 1 year | Low |
| NAATI CCL (if bilingual) | +5 | 3-6 months | Medium |
| Professional Year | +5 | 12 months | HIGH |
Will the 2026 Reforms Affect Me?
⚠ Keep in mind: The 2026 points test reforms are currently just proposals. The existing Schedule 6D points system is still fully in effect until any new legislation actually passes through parliament.
Tech and cyber security roles remain a massive strategic priority for Australia. However, because it is such a popular occupation, any proposed increase to the minimum points threshold (potentially up to 70 points) could affect applicants currently sitting on the border. On the flip side, if the government pushes forward with a new income-based points system, senior Penetration Testers earning higher salaries could find themselves at a distinct advantage, given the strong remuneration in the cyber sector.
→ Stay updated on the 2026 points test reform