Penetration Tester - Hybrid, High-Impact Security Work

Bupa Australia; Melbourne; On-site; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Viva wellbeing program

Flexible working

Job summary

Bupa Australia is seeking a senior Penetration Tester to identify and mitigate security vulnerabilities across applications, networks, and IT systems. You will perform simulated attacks, document findings, and guide remediation while working closely with development and security teams.

The role requires 10+ years in IT with 5+ years in pentesting, industry certifications such as CEH, OSCP, GPEN, and CCSP, and a focus on delivering secure, resilient systems.

Qualifications

• 10+ years of Information Technology experience, with at least 5 years in security and pentesting.
• Strong business acumen with customer focus.
• Vendor and partner management experience.

Responsibilities

• Perform thorough penetration testing on applications, networks, and IT systems to identify weaknesses.
• Use manual and automated tools to identify and exploit vulnerabilities.
• Assess web and mobile apps, network infrastructure, cloud environments, and endpoints.
• Simulate real-world cyberattacks to evaluate security posture.
• Document findings and provide remediation recommendations.
• Collaborate with development and IT teams to remediate issues promptly.
• Advise on security best practices within development processes and configurations.
• Ensure testing complies with CREST, OWASP, NIST, GDPR.

Job description

At Bupa,purpose meets possible. Join us and help shape a future where healthcare is more connected, morepersonaland more human.

We’rea global healthcare leader trusted by millions and committed to helping people to live longer, healthier, happier lives and making a better world. Healthcare is changing, and so are we.We’reinvesting in more clinics, bettersystemsand smarter, more connected ways to help our customers. As we continue to expand our services and invest in innovation,you’llhelp create a healthcare system that meets people where they are, responds to what they need and leaves them better than before. Here, your work has purpose, your voice matters and your future is full of possibility.

Just imagine the impact you could make.

Opportunity snapshot- Permanent role

The Penetration Tester plays a critical role in identifying, assessing, and mitigating security vulnerabilities within Bupa applications, networks, and IT systems. They conduct simulated attacks to evaluate the effectiveness of security measures and ensure that systems are resilient against real-world threats, and validate the exploitability of identified vulnerabilities.

Responsibilities

• Perform thorough penetration testing on Bupa’s applications, networks, and IT systems to identify security weaknesses and vulnerabilities.
• Use manual and automated tools to identify and exploit vulnerabilities in both internal and external systems.
• Conduct assessments on web applications, mobile applications, network infrastructures, cloud environments, and endpoints.

• Simulate real-world cyberattacks to evaluate the security posture of Bupa’s systems and applications.

• Safely exploit vulnerabilities to demonstrate the potential impact and exploitability of identified security weaknesses.

  Provide a risk analysis of identified vulnerabilities based on severity, exploitability, and potential business impact.

• Prioritise findings based on risk and collaborate with technical teams to address the most critical issues first.

• Document and report all findings, including vulnerabilities, exploits, and recommendations for remediation.

• Work closely with development, security, and IT teams to ensure vulnerabilities are remediated effectively and in a timely manner.

• Provide guidance and support for the implementation of security best practices within development processes and system configurations.

• Ensure all testing activities comply with organizational security policies, legal requirements, and industry standards (e.g., CREST, OWASP, NIST, GDPR).

Requirements

• 10+ years of experience in Information Technology, minimum 10 years’ experience in Security with 5+ years of pentesting experience.

• Business and commercial acumen - strong business experience with a strong focus of the customer

• Vendor and partner management experience, including professional services and technology vendors.

• Certifications required as below:
  • Certified Ethical Hacker (CEH): Industry-standard certification focused on ethical hacking and penetration testing techniques.
  • Offensive Security Certified Professional (OSCP): Highly regarded certification for penetration testers, demonstrating practical skills in offensive security.
  • GIAC Penetration Tester (GPEN): A certification focused on penetration testing and ethical hacking methodologies.
  • Certified Cloud Security Professional (CCSP): Relevant if working with cloud environments (AWS, Azure, GCP)

Why you’lllove it?

At Bupa, our purpose is to help people live longer, healthier, happier lives and make a better world, and we know this starts with delivering our purpose for our people.

Our wellbeing program Viva has been designed to help you to live a healthy and happy life. It includes access to health & general insurance discounts, information and education sessions, and preventative healthcare screening such as annual health assessments and skin checks. Through Viva you have access to a range of benefits that will help you tomaintainyour physical, mental, social, digital,environmentaland financial wellbeing. As well as a competitive salary, a range of Bupa benefits and flexible working,you’llbe challenged and encouraged to innovate.

If this sounds exciting,we’dlove to hear from you.Let’sshape the future of healthcare, together.

At Bupa your wellbeing, identity, and personal story are respected and valued. We are continuing to build teams that reflect the diversity of the communities we serve. Bupa is committed toprovidingequal opportunities and fostering a workplace and environment that is free of discrimination,bullyingand harassment.

We actively encourage applicants from all backgrounds and experiences, including Aboriginal and Torres Strait Islander peoples, veterans, people with disabilities, and LGBTQIA+ applicants.

We are dedicated to removing barriers to participation. If you need any reasonable adjustments during the recruitment process, or if you’d like to discuss how this role can be flexible for you, please let us know so we can support your participation on an equitable basis.