Senior Offensive Security/ Penetration Tester - Enterprise Security

Bluefin Resources; Sydney; On-site; AUD 150,000 - 220,000; Full time

Job summary

Bluefin Resources Pty is seeking a Senior Penetration Tester for a leading Australian bank. You will own advanced penetration testing and security assessments across a diverse technology environment, collaborating with engineering, architecture and security teams to drive remediation and secure critical enterprise platforms.

Exposure to AI security topics, including LLM vulnerabilities and prompt injection, will shape how offensive security evolves with cloud platforms and APIs in a bank-wide

Qualifications

• Experience in penetration testing across various tech stacks.
• OSCP or equivalent certification preferred.
• Ability to communicate findings and remediation clearly.

Responsibilities

• Lead and execute advanced penetration testing across web applications, APIs, mobile applications, networks, infrastructure and thick-client environments.
• Identify, exploit and validate vulnerabilities using a range of offensive security tools and techniques.
• Produce high-quality technical reports, clearly communicating findings, risk ratings and practical remediation recommendations.
• Work with technology teams to validate vulnerabilities and drive effective remediation.
• Conduct threat modelling and risk assessments, identifying potential attack paths and weaknesses across applications and platforms.
• Assess emerging technologies, including AI security concepts, LLM vulnerabilities, prompt injection and agentic AI security risks.
• Contribute to the development and continuous improvement of penetration testing methodologies, security standards and vulnerability management practices.
• Oversee relationships with external penetration testing providers, ensuring quality, consistency and value from third-party engagements.
• Share knowledge and mentor junior team members, helping build technical capability across the team.

Skills

Penetration testing

Offensive security

Web applications

APIs

Mobile applications

Networks

OWASP methodologies

OSSTMM

Security testing frameworks

Automated security testing tools

Secure coding principles

Threat modelling

Risk analysis

AI security concepts

LLM vulnerabilities

Prompt injection

Agentic AI security

Cloud security (AWS/Azure/GCP)

Vendor management

Mentoring

Education

OSCP certification

Job description

Join a leading Australian bank in a newly created Senior Penetration Testing role, working alongside a highly skilled team of cyber security specialists to identify vulnerabilities, challenge security controls and protect critical enterprise technology.
This is an opportunity to work on complex, high-impact security initiatives across a large-scale banking environment, with exposure to modern applications, cloud platforms, APIs, mobile technologies and emerging AI solutions.
You'll play a key role in strengthening the organisation's security posture, influencing remediation strategies and helping shape how offensive security evolves in response to an increasingly sophisticated threat landscape.

As a Senior Penetration Tester, you'll take ownership of advanced penetration testing and security assessments across a diverse technology environment. You'll work closely with engineering, architecture and security teams, providing practical advice and helping drive meaningful security improvements.
The role also offers exposure to emerging technologies, including LLM security, prompt injection and agentic AI attack surfaces, giving you the opportunity to explore how offensive security techniques can be applied to the next generation of enterprise technology.

Responsibilities

• Lead and execute advanced penetration testing across web applications, APIs, mobile applications, networks, infrastructure and thick-client environments.
• Identify, exploit and validate security vulnerabilities using a range of offensive security tools and techniques.
• Produce high-quality technical reports, clearly communicating findings, risk ratings and practical remediation recommendations.
• Work with technology teams to validate vulnerabilities and drive effective security remediation.
• Conduct threat modelling and risk assessments, identifying potential attack paths and weaknesses across applications and platforms.
• Assess emerging technologies, including AI/LLM applications, prompt injection vulnerabilities and agentic AI security risks.
• Contribute to the development and continuous improvement of penetration testing methodologies, security standards and vulnerability management practices.
• Oversee relationships with external penetration testing providers, ensuring quality, consistency and value from third-party engagements.
• Share knowledge and mentor junior team members, helping build technical capability across the team.

Key Skills / Experience

• Strong hands-on experience in penetration testing, offensive security or application security.
• OSCP certification highly desirable.
• Demonstrated experience testing web applications, APIs, mobile applications, networks, infrastructure and thick-client applications.
• Strong understanding of OWASP methodologies, OSSTMM and industry security testing frameworks.
• Experience with automated security testing tools and integrating security testing into development processes.
• Solid understanding of software development, secure coding principles, threat modelling and risk analysis.
• Exposure to AI security concepts, including LLM vulnerabilities, prompt injection and emerging AI attack techniques.
• Working knowledge of AWS, Microsoft Azure or Google Cloud security.
• Experience managing third-party security vendors and external testing engagements.
• A passion for knowledge sharing, mentoring and contributing to a high-performing technical team.