Penetration Tester – Multiple Levels

About the role

The Penetration Testing squad at ANZ protects the bank by actively identifying cyber‑security threats across systems, services and applications. As a Penetration Tester you will lead testing strategy, ensure execution integrity and drive continuous improvement to deliver meaningful risk reduction and executive confidence.

Key responsibilities

• Plan, execute and drive penetration tests across ANZ’s enterprise environments.
• Combine manual and automated techniques to identify vulnerabilities and translate findings into clear, actionable recommendations.
• Analyse findings, assess technical and business impact, and communicate outcomes to technology teams.
• Research and apply relevant attack techniques and stay up‑to‑date with emerging threats.
• Drive continual improvement and innovation in penetration‑testing practices.

Required profile

• At least 4 years of hands‑on penetration‑testing experience.
• Familiarity with industry‑standard frameworks such as OWASP, CWE and PTES.
• Relevant certifications (e.g., OSCP, CEH) are highly regarded.
• Experience testing web applications, APIs, mobile apps and thick‑client software.
• Strong understanding of application, network and infrastructure security testing.

Required skills

• OWASP
• CWE
• PTES
• OSCP (or equivalent)
• CEH (or equivalent)
• Manual penetration‑testing techniques
• Automated testing tools
• Web application security testing
• API and web services testing
• Mobile application security testing
• Thick‑client security testing
• Network security testing
• Infrastructure security testing