Senior Penetration Tester

Create your best future and join Westpac as a Senior Penetration Tester.

What’s the role?

The role will be responsible for advising Westpac business and IT units on information security, with a focus on penetration testing and vulnerability management.

Your key responsibilities will include performing penetration testing and driving remediation through detailed reporting, while advising on and implementing security policies, frameworks, and controls across business processes, applications, and third-party environments. You will also recommend and deploy security solutions, support governance and risk-aligned strategies, contribute to process improvements, and communicate security concepts clearly to stakeholders.

Additionally, your responsibilities will include maintaining security documentation and compliance, investigating and reporting on security incidents, implementing controls and providing clear insights to stakeholders, promoting security awareness, and leading and developing a high-performing team aligned with business objectives.

What do I need?

- Experience performing advanced web, network, application, mobile and infrastructure level penetration testing.

- Experience in information / application security, information technology, risk management, or equivalent role.

- Experience in identifying and documenting security requirements and writing Penetration Testing reports and communicating identified vulnerabilities to internal stakeholders.

- Formal certification or education in Penetration Testing (e.g., OSCP, OSWE, OSCE, CREST, HTB CPTS, or advanced SANS certifications) is a mandatory requirement for this role.

- Working knowledge of regulatory frameworks such as OWASP, OSSTMM related to Information Security and implementing automated security testing tools and processes.

- Strong expertise in software development and risk analysis / threat modelling.

- Familiarity with modern AI concepts such as LLM security, prompt injection and agentic AI attack surfaces, and how AI can be leveraged to enhance penetration testing methodologies.

- Ability to work both individually and within a team environment and build strong relationships with the internal stakeholders.

- Solid understanding of one or more of the following Cloud platforms: AWS, Microsoft Azure, Google Cloud. Knowledge of Containerisation technologies such as Kubernetes, Docker, Podman and OpenShift is favourable.

- Experience implementing automated security testing tools and processes.

Create your future today

To get started, simply click on the APPLY or APPLY NOW button

We’re all about creating a supportive and inclusive community. We welcome everyone – no matter your age, gender, background, or abilities. We also provide additional support to welcome our veterans, Indigenous Australians and neurodiverse community.

If you need any adjustments during the recruitment process, you can find more information and contact details on our FAQs and how to contact us page (https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.westpac.com.au%2Fabout-westpac%2Fcareers%2Ffaq-contact-us%2F&data=05%7C02%7Cdakotah.bishop%40westpac.com.au%7Cd15ccf34ab1e42eba8b108de7044f492%7C57c64fd466ca49f5ab382e67ef58e724%7C0%7C0%7C639071638622937325%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=CVu4NaILh3E9bnppTkmFikGV3MAwuAh5JuFwMi%2FFj5o%3D&reserved=0), under the ‘Diversity, sustainability and flexibility’ section.

We may close this job advertisement earlier than the advertised closing date if suitable candidates are identified. We encourage you to apply as soon as possible.

#LI - Hybrid.