Senior Penetration Tester

Westpac; Sydney; Hybrid; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Hybrid work arrangements

Mortgage rate discounts

Culture, Lifestyle and Wellbeing leave

Learning and development opportunities

Community volunteering

Job summary

Westpac in Sydney is seeking a Senior Penetration Tester to advise business and IT units on information security, focusing on penetration testing and vulnerability management. You will perform testing across web, network, application, and cloud environments and drive remediation through detailed reporting.

In this role you’ll implement security policies and controls, support governance and risk strategies, and mentor a high‑performing security team aligned with Westpac’s objectives.

Qualifications

• Advanced penetration testing across web, network, application, mobile, and infrastructure.
• Experience in information security, IT risk management, or equivalent role.
• Ability to document security requirements and report vulnerabilities to internal stakeholders.
• Formal certification or education in Penetration Testing (e.g., OSCP, OSWE, OSCE, CREST, HTB CPTS, or advanced SANS certifications) is mandatory.
• Working knowledge of OWASP, OSSTMM and automated security testing tools and processes.
• Strong expertise in software development and risk analysis / threat modelling.
• Familiarity with Cloud platforms (AWS, Azure, Google Cloud) and containers (Kubernetes, Docker, OpenShift).
• Experience implementing automated security testing tools and processes.

Responsibilities

• Perform penetration testing and drive remediation through detailed reporting.
• Advise on and implement security policies, frameworks, and controls across processes, apps, and third‑party environments.
• Recommend and deploy security solutions; support governance and risk aligned strategies.
• Promote security awareness and lead a high‑performing team aligned with business objectives.

Skills

Penetration testing

Web security

Network security

Application security

Mobile security

Cloud security

Threat modeling

Report writing

Stakeholder communication

Education

Penetration Testing Certifications (OSCP/OSWE/OSCE/CREST)

Tools

Kubernetes

Docker

OpenShift

Job description

Create your best future and join Westpac as a Senior Penetration Tester.

What’s the role?

The role will be responsible for advising Westpac business and IT units on information security, with a focus on penetration testing and vulnerability management.

Your key responsibilities will include performing penetration testing and driving remediation through detailed reporting, while advising on and implementing security policies, frameworks, and controls across business processes, applications, and third‑party environments. You will also recommend and deploy security solutions, support governance and risk‑aligned strategies, contribute to process improvements, and communicate security concepts clearly to stakeholders.

Additionally, your responsibilities will include maintaining security documentation and compliance, investigating and reporting on security incidents, implementing controls and providing clear insights to stakeholders, promoting security awareness, and leading and developing a high‑performing team aligned with business objectives.

What do I need?

• Experience performing advanced web, network, application, mobile and infrastructure level penetration testing.
• Experience in information / application security, information technology, risk management, or equivalent role.
• Experience in identifying and documenting security requirements and writing Penetration Testing reports and communicating identified vulnerabilities to internal stakeholders.
• Formal certification or education in Penetration Testing (e.g., OSCP, OSWE, OSCE, CREST, HTB CPTS, or advanced SANS certifications) is a mandatory requirement for this role.
• Working knowledge of regulatory frameworks such as OWASP, OSSTMM related to Information Security and implementing automated security testing tools and processes.
• Strong expertise in software development and risk analysis / threat modelling.
• Familiarity with modern AI concepts such as LLM security, prompt injection and agentic AI attack surfaces, and how AI can be leveraged to enhance penetration testing methodologies.
• Ability to work both individually and within a team environment and build strong relationships with the internal stakeholders.
• Solid understanding of one or more of the following Cloud platforms: AWS, Microsoft Azure, Google Cloud. Knowledge of Containerisation technologies such as Kubernetes, Docker, Podman and OpenShift is favourable.
• Experience implementing automated security testing tools and processes.

Why join us?

We’re obsessed with becoming our customers' #1 banking partner for life and we’re looking for people who are passionate about helping us achieve that goal. In return, we’re committed to making Westpac the best place to work in the country. Here are just a few of the ways we’re already doing that:

• Special offers on banking products and discounts from top brands, including generous employee‑only mortgage rates!
• Flexible work arrangements to help you achieve a greater work/life balance, and a variety of leave options including Culture, Lifestyle and Wellbeing leave.
• Tailored learning and development opportunities to help your grow your career within the bank.
• Lots of opportunities to ‘give back’ to the Community by getting involved in our many volunteering initiatives.

#LI - Hybrid.