Senior Penetration Tester

About the role

A major bank in Sydney is looking for an experienced Senior Penetration Tester to join its cybersecurity team in a newly created, permanent role. You will work with a highly skilled team of Pen Testers on high-impact projects and help strengthen the organisation's security posture through advanced penetration testing and vulnerability assessments.

Key responsibilities

• Perform advanced web, network, application, mobile and infrastructure-level penetration testing
• Run penetration tests with various tools and techniques, write reports on identified vulnerabilities and recommendations, and support security remediation
• Advise on and ensure the implementation of penetration testing and vulnerability management policies, processes, standards and guidelines
• Identify and advise on requirements for business processes, applications and products so they remain protected against current and emerging threats
• Advise on and ensure the implementation of frameworks that provide appropriate security controls

Required profile

• Experience performing advanced penetration testing across web, network, application, mobile and infrastructure levels
• Strong expertise in software development and risk analysis / threat modelling
• Familiarity with modern AI concepts such as LLM security, prompt injection and agentic AI attack surfaces, and how AI can improve penetration testing
• Knowledge sharing or mentoring experience (e.g. with graduates)

Required skills

• OSCP certification
• Web application, API and mobile app security testing
• Working knowledge of regulatory frameworks such as OWASP and OSSTMM
• Experience implementing automated security testing tools and processes
• Thick client testing experience
• Experience managing third-party vendors
• Solid understanding of at least one cloud platform (AWS, Microsoft Azure or Google Cloud); container/Kubernetes knowledge desirable

Candidates are asked to reply quickly with their latest resume.