Lead Penetration Tester for Enterprise Security

Westpac New Zealand; Wellington; On-site; NZD 120,000 - 180,000; Full time

Benefits offered by this job

Holiday leave (4 weeks)

Wellbeing leave (5 days)

Purchased leave options up to 4 weeks

Banking benefits

Insurance discounts

Superannuation scheme

Development opportunities

Internal mobility

Recognition program

School holiday subsidy

Volunteer days

Job summary

Westpac New Zealand is seeking a Senior Information Security Consultant (Penetration Testing) to plan, lead, and deliver authorised security testing across technology services. You will identify exploitable weaknesses, demonstrate credible attack paths, and provide practical remediation guidance to improve security assurance.

You will work with engineering, risk, and third-party stakeholders to verify remediation and evolve testing methodologies, including cloud-native and AI-enabled services,

Qualifications

• Demonstrated experience independently delivering penetration testing or offensive-security assessments in large enterprise environments.
• Technical depth in at least two testing domains with practical breadth across web, API, network, infrastructure, cloud, identity or mobile security testing.
• Strong understanding of secure coding principles and the ability to perform effective security-focused code reviews.
• Strong knowledge of Windows Security, Linux Security, Active Directory, Authentication and Authorisation, TCP/IP Networking, DNS, HTTP/S, and API Security
• Ability to analyse attack paths and accurately determine exploitability and business risk.
• Experience producing high-quality penetration-testing reports for both technical and non-technical audiences.
• Practical scripting and/or automation capability using Python, PowerShell, Bash or similar languages.
• Working knowledge of at least one major public cloud platform.
• Strong judgement regarding approvals, scope management, evidence handling and testing safety.
• Excellent written communication, stakeholder engagement and consulting skills.

Skills

Penetration testing

Web security testing

API security testing

Network security

Cloud security

Scripting (Python/PowerShell/Bash)

Code review security

Windows/Linux security

Active Directory security

Attack-path analysis

Security reporting

Public cloud platforms

DevSecOps / CI/CD security

Job description

Westpac New Zealand is seeking a Senior Information Security Consultant (Penetration Testing) to plan, lead, and deliver authorised security testing across technology services. You will identify exploitable weaknesses, demonstrate credible attack paths, and provide practical remediation guidance to improve security assurance.

You will work with engineering, risk, and third-party stakeholders to verify remediation and evolve testing methodologies, including cloud-native and AI-enabled services,