Senior Penetration Tester – Hybrid, Lead Security

Westpac Group; Sydney; Hybrid; AUD 120,000 - 160,000; Full time

Benefits offered by this job

Mortgage discounts

Flexible work

Learning & development

Community volunteering

Job summary

Westpac Group is seeking a Senior Penetration Tester to advise business and IT units on information security, focusing on penetration testing and vulnerability management. You will lead testing efforts, drive remediation, and contribute to security policies and controls across processes, applications, and third-party environments.

The role requires hands-on testing across web, network, mobile and infrastructure, plus strong reporting, stakeholder communication, and team leadership to build a

Qualifications

• Advanced penetration testing across web, network, app, mobile and infrastructure.
• Experience in information security, IT risk management, or related roles.
• Ability to document security requirements and write Penetration Testing reports for stakeholders.
• Mandatory penetration testing certifications (OSCP, OSWE, OSCE, CREST, HTB CPTS, or advanced SANS).
• Familiarity with OWASP, OSSTMM and automated testing tools.
• Strong software development knowledge and risk/threat modeling.
• Knowledge of cloud platforms (AWS, Azure, GCP) and container tech.
• Ability to work solo and in teams; strong stakeholder relationships.
• Understanding AI security concepts and LLM security.
• Experience with automated security testing tools.

Responsibilities

• Advise on information security across business and IT units.
• Perform penetration testing and drive remediation through detailed reporting.
• Implement security policies, frameworks, and controls across processes, applications, and third-party environments.
• Deploy security solutions and support governance and risk-aligned strategies.
• Promote security awareness and lead a high-performing security team.
• Maintain security documentation and compliance.
• Investigate security incidents and provide clear insights to stakeholders.
• Communicate security concepts clearly to stakeholders.

Skills

Penetration testing

Information security

Vulnerability management

Threat modeling

Security reporting

Cloud platforms AWS

Cloud platforms Azure

Cloud platforms GCP

Kubernetes

Docker

AI security

Education

Penetration testing certification

Job description

Westpac Group is seeking a Senior Penetration Tester to advise business and IT units on information security, focusing on penetration testing and vulnerability management. You will lead testing efforts, drive remediation, and contribute to security policies and controls across processes, applications, and third-party environments.

The role requires hands-on testing across web, network, mobile and infrastructure, plus strong reporting, stakeholder communication, and team leadership to build a