Senior Penetration Tester & Security Advisory Lead

Westpac Group; Sydney; On-site; AUD 150,000 - 190,000; Full time

Job summary

Westpac Group is seeking a senior information security professional in Sydney to advise on penetration testing and vulnerability management across business and IT units. You will perform advanced testing, drive remediation through detailed reporting, and shape security policies, frameworks, and controls across processes and third-party environments.

The role involves deploying security solutions, supporting governance and risk strategies, and promoting security awareness.

Qualifications

• Experience performing advanced web, network, application, mobile and infrastructure level penetration testing.
• Experience in information security, information technology, risk management, or equivalent role.
• Formal certification or education in Penetration Testing (e.g., OSCP, OSWE, OSCE, CREST, HTB CPTS, or advanced SANS certifications).
• Working knowledge of regulatory frameworks such as OWASP, OSSTMM related to Information Security and automated security testing tools and processes.
• Strong expertise in software development and risk analysis / threat modelling.
• Familiarity with modern AI concepts such as LLM security, prompt injection and agentic AI attack surfaces.
• Ability to work both individually and within a team environment and build relationships with stakeholders.
• Solid understanding of one or more Cloud platforms: AWS, Azure, Google Cloud; Containerisation: Kubernetes, Docker, OpenShift.

Responsibilities

• Advise Westpac business and IT units on information security with a focus on penetration testing and vulnerability management.
• Perform penetration testing and drive remediation through detailed reporting; advise on security policies, frameworks and controls across processes and third-party environments.
• Recommend and deploy security solutions; support governance and risk-aligned strategies; contribute to process improvements.
• Communicate security concepts clearly to stakeholders and maintain security documentation and compliance.
• Investigate and report on security incidents; lead and develop a high-performing team aligned with business objectives.

Skills

Penetration testing

Information security

Risk management

Threat modelling

AI security concepts

Cloud platforms

Containerisation

Communication with stakeholders

Education

Penetration testing certifications (OSCP/OSWE/OSCE/CREST/SANS)

Job description

Westpac Group is seeking a senior information security professional in Sydney to advise on penetration testing and vulnerability management across business and IT units. You will perform advanced testing, drive remediation through detailed reporting, and shape security policies, frameworks, and controls across processes and third-party environments.

The role involves deploying security solutions, supporting governance and risk strategies, and promoting security awareness.