Senior Penetration Tester: AI-Driven Security & Cloud

Talent; Sydney; On-site; AUD 140,000 - 210,000; Full time

Benefits offered by this job

Amazing culture

Supportive leadership

Regular team events

Performance bonus

Discounted banking products

Job summary

A leading financial services organisation is seeking a Senior Penetration Tester to join their team on a permanent basis. This hands-on role will perform advanced testing across web, mobile, applications, networks and infrastructure, identifying vulnerabilities and driving remediation with clear reporting and practical recommendations.

You will also advise business and technology stakeholders on security controls, contribute to threat modelling and enhance automated security testing, including

Qualifications

• Must have hands-on pentesting across web, mobile, apps, networks and infra.
• Formal certification or education in penetration testing.
• Experience producing detailed pentest reports and remediation guidance.
• Knowledge of OWASP, OSSTMM, and security testing methodologies.
• Experience with automated security testing tooling and processes.

Responsibilities

• Perform advanced penetration testing across web, mobile, app, network and infrastructure environments.
• Identify vulnerabilities, assess business risk and drive remediation with clear reporting.
• Advise stakeholders on security controls and contribute to threat modelling.
• Improve automated security testing capabilities and explore AI-enhanced testing.
• Provide technical leadership and support team development.

Skills

Penetration testing

Stakeholder engagement

Security testing automation

Education

OSCP

OSWE

OSCE

CREST

HTB CPTS

SANS certs

Tools

OWASP

OSSTMM

Automated security testing tools

Job description

A leading financial services organisation is seeking a Senior Penetration Tester to join their team on a permanent basis. This hands-on role will perform advanced testing across web, mobile, applications, networks and infrastructure, identifying vulnerabilities and driving remediation with clear reporting and practical recommendations.

You will also advise business and technology stakeholders on security controls, contribute to threat modelling and enhance automated security testing, including