Senior Penetration Tester

About the role

Westpac is seeking a Senior Penetration Tester to advise business and IT units on information security, focusing on penetration testing and vulnerability management.

Key responsibilities

• Perform advanced web, network, application, mobile and infrastructure penetration testing and produce detailed remediation reports.
• Advise on and implement security policies, frameworks and controls across applications, cloud environments and third‑party services.
• Maintain security documentation, support governance, investigate incidents and promote security awareness.
• Lead and develop a high‑performing security team aligned with business objectives.

Required profile

• Proven experience in advanced penetration testing and vulnerability management.
• Formal certification in penetration testing (e.g., OSCP, OSWE, OSCE, CREST, HTB CPTS, SANS).
• Working knowledge of regulatory frameworks such as OWASP and OSSTMM.
• Ability to work independently and collaboratively with internal stakeholders.

Required skills

• Penetration testing tools and methodologies for web, network, mobile and cloud.
• Automation of security testing processes.
• Software development, threat modelling and risk analysis.
• AI security concepts including LLM security and prompt injection.
• Cloud platforms: AWS, Microsoft Azure, Google Cloud.
• Container technologies: Kubernetes, Docker, Podman, OpenShift.

What we offer

• Special offers on banking products and employee‑only mortgage rates.
• Flexible work arrangements and a variety of leave options.
• Tailored learning and development opportunities.
• Community volunteering initiatives and an inclusive workplace.