Senior Penetration Tester — AI, Cloud & App Security

Bluefin Resources Pty; Sydney; On-site; AUD 150,000 - 220,000; Full time

Job summary

Bluefin Resources Pty is seeking a Senior Penetration Tester for a leading Australian bank. You will own advanced penetration testing and security assessments across a diverse technology environment, collaborating with engineering, architecture and security teams to drive remediation and secure critical enterprise platforms.

Exposure to AI security topics, including LLM vulnerabilities and prompt injection, will shape how offensive security evolves with cloud platforms and APIs in a bank-wide

Qualifications

• Experience in penetration testing across various tech stacks.
• OSCP or equivalent certification preferred.
• Ability to communicate findings and remediation clearly.

Responsibilities

• Lead and execute advanced penetration testing across web applications, APIs, mobile applications, networks, infrastructure and thick-client environments.
• Identify, exploit and validate vulnerabilities using a range of offensive security tools and techniques.
• Produce high-quality technical reports, clearly communicating findings, risk ratings and practical remediation recommendations.
• Work with technology teams to validate vulnerabilities and drive effective remediation.
• Conduct threat modelling and risk assessments, identifying potential attack paths and weaknesses across applications and platforms.
• Assess emerging technologies, including AI security concepts, LLM vulnerabilities, prompt injection and agentic AI security risks.
• Contribute to the development and continuous improvement of penetration testing methodologies, security standards and vulnerability management practices.
• Oversee relationships with external penetration testing providers, ensuring quality, consistency and value from third-party engagements.
• Share knowledge and mentor junior team members, helping build technical capability across the team.

Skills

Penetration testing

Offensive security

Web applications

APIs

Mobile applications

Networks

OWASP methodologies

OSSTMM

Security testing frameworks

Automated security testing tools

Secure coding principles

Threat modelling

Risk analysis

AI security concepts

LLM vulnerabilities

Prompt injection

Agentic AI security

Cloud security (AWS/Azure/GCP)

Vendor management

Mentoring

Education

OSCP certification

Job description

Bluefin Resources Pty is seeking a Senior Penetration Tester for a leading Australian bank. You will own advanced penetration testing and security assessments across a diverse technology environment, collaborating with engineering, architecture and security teams to drive remediation and secure critical enterprise platforms.

Exposure to AI security topics, including LLM vulnerabilities and prompt injection, will shape how offensive security evolves with cloud platforms and APIs in a bank-wide