Penetration Tester – Multiple Levels

About the role

ANZ is looking for skilled Penetration Testers to join a dedicated squad that protects the bank’s digital assets. The team drives the strategy, execution and continuous improvement of penetration testing across the enterprise, delivering clear risk reduction and assurance to senior leadership.

Key responsibilities

• Plan, execute and drive penetration tests across ANZ’s enterprise environments.
• Combine manual and automated techniques to uncover vulnerabilities and translate findings into actionable recommendations.
• Analyse technical and business impact of findings and provide remediation guidance.
• Research and apply relevant attack techniques, including emerging AI‑related threats.
• Engage with technology teams to communicate outcomes and ensure assurance.
• Continuously improve testing methodologies and innovate penetration testing practices.

Required profile

• 4+ years of hands‑on penetration testing experience.
• Familiarity with industry frameworks such as OWASP, CWE and PTES.
• Relevant certifications (e.g., OSCP, CEH) are a strong plus.
• Experience testing web applications, APIs, mobile apps, thick‑client software, networks and infrastructure.
• Ability to run multiple exploitation scenarios and produce high‑quality reports.

Required skills

• Penetration testing (manual and automated).
• OWASP, CWE, PTES frameworks.
• OSCP, CEH certifications (preferred).
• Web application, API, mobile, and thick‑client testing.
• Network and infrastructure security testing.
• Dynamic Application Security Testing (DAST) tools.
• Knowledge of AI ecosystems, LLM frameworks and AI‑focused testing tools.