Senior Information Security Consultant

Westpac New Zealand; Auckland; On-site; NZD 140,000 - 210,000; Full time

Benefits offered by this job

4 weeks holiday

Wellbeing leave

Banking benefits

Professional development

Recognition

School holiday subsidy

Volunteer days

Job summary

Westpac New Zealand is seeking a Senior Information Security Consultant (Penetration Testing) to plan, lead and deliver authorised security assessments across technology services. You will identify exploitable weaknesses, demonstrate attack paths, and provide actionable remediation with stakeholders across engineering, risk and third parties.

The role requires deep security testing experience in multiple domains, strong secure-coding knowledge, scripting ability, and cloud proficiency.

Qualifications

• Experience delivering penetration testing in large enterprise environments.
• Depth in at least two testing domains with breadth across web, API, network, cloud, identity or mobile security testing.
• Strong understanding of secure coding principles and code reviews.
• Strong knowledge of Windows Security, Linux Security, Active Directory, Authentication and Authorization, TCP/IP Networking, DNS, HTTP/S, and API Security.
• Ability to analyse attack paths and accurately determine exploitability and business risk.
• Experience producing high-quality penetration-testing reports for both technical and non-technical audiences.
• Practical scripting and/or automation capability using Python, PowerShell, Bash or similar languages.
• Working knowledge of at least one major public cloud platform.
• Strong judgement regarding approvals, scope management, evidence handling and testing safety.
• Excellent written communication, stakeholder engagement and consulting skills.

Responsibilities

• Plan, lead and deliver authorised, independent security testing across technology services.
• Explain customer and business impact and provide practical remediation guidance.
• Collaborate with engineering, risk and third-party stakeholders to verify remediation and improve testing coverage and repeatability.
• Support evolution of testing methodologies, automation capabilities and cloud-native/AI-enabled assessments.

Skills

Penetration testing

Security testing breadth

Secure coding

Windows security

Linux security

Active Directory

Attack-path analysis

Security reporting

Scripting/Automation

Cloud platforms

Testing governance

Communication skills

Tools

Kubernetes

Docker

OpenShift

CI/CD tooling

Job description

Mō te tūranga | About the Role

The Senior Information Security Consultant (Penetration Testing) plans, leads and delivers authorised, independent and risk-based security testing across Westpac New Zealand technology services.

The role identifies and safely validates exploitable weaknesses, demonstrates credible attack paths, explains customer and business impact, and provides practical root-cause remediation guidance. The role works with engineering, service, risk and third-party stakeholders to verify remediation and improve the effectiveness, coverage and repeatability of security assurance activities.

The role contributes to the protection of customer, business and operational resilience while ensuring testing is conducted safely, ethically and within approved scope. The role also supports the evolution of testing methodologies, automation capabilities and emerging technology assessments, including cloud-native and AI-enabled services.

Nā tāu rourou | What will you bring?

• Demonstrated experience independently delivering penetration testing or offensive-security assessments in large enterprise environments.
• Technical depth in at least two testing domains with practical breadth across web, API, network, infrastructure, cloud, identity or mobile security testing.
• Strong understanding of secure coding principles and the ability to perform effective security-focused code reviews.
• Strong knowledge of Windows Security, Linux Security, Active Directory, Authentication and Authorisation, TCP/IP Networking, DNS, HTTP/S, and API Security
• Ability to analyse attack paths and accurately determine exploitability and business risk.
• Experience producing high-quality penetration-testing reports for both technical and non-technical audiences.
• Practical scripting and/or automation capability using Python, PowerShell, Bash or similar languages.
• Working knowledge of at least one major public cloud platform.
• Strong judgement regarding approvals, scope management, evidence handling and testing safety.
• Excellent written communication, stakeholder engagement and consulting skills.

Preferred

• Financial services or regulated industry experience.
• Kubernetes, Docker, OpenShift or container security testing.
• CI/CD pipeline and DevSecOps security testing.
• Experience assessing AI-enabled systems, agents and LLM-based applications.
• Familiarity with attack-path validation and automated penetration-testing platforms.
• Relevant professional certification or equivalent demonstrated capability, such as OSCP, OSWE, OSEP, OSCE3, CREST CRT/CCT, HTB CPTS, GXPN, GPEN, or advanced SANS offensive security certification.

Westpac Hei Wāhi Mahi | Working at Westpac

In addition to immersing yourself in a supportive team environment, you'll receive some great job perks and benefits including:

• 4 weeks standard holiday + 5 additional days of wellbeing leave to support you to be your best
• Additional purchased leave options up to 4 weeks per year
• Banking benefits, insurance discounts and superannuation scheme
• Growth and development – we provide opportunities for development and promote internal mobility
• Recognition - we recognise and reward our star performers
• School holiday subsidy - help you balance work and family during school holiday
• 2 Volunteer days per year

Ko mātou tēnei | Our Organisation

At Westpac, we’re working together to build a fairer and stronger New Zealand for our people, customers, and communities. For over 160 years we’ve been driven by our purpose to Create Better Futures Together.

What makes us unique are the incredible people we’re lucky enough to have walk through our doors every day. The giant ‘W’ on our building doesn’t just stand for Westpac – it says, double you. We’re a place that values, rewards and recognises individuality. Where you can be your whole self, your true self, and your best self. We’re recognised as a place where talent is developed, where passions are fuelled and where ambitions of all shapes and sizes thrive. And it all starts with you!

The people of Aotearoa, New Zealand hail from many cultures and backgrounds. At Westpac New Zealand, we draw on this enormous talent pool to cultivate a team rich in ability and empowered to reach its full potential. Our aim is to be brave challengers, celebrating our differences and relentlessly advocating for our customers. It starts with us – we believe that when we care deeply and do our best for our people, they’ll do their best for our customers.

We encourage people from all walks of life to apply, including those who are neurodiverse, have chronic health conditions or disabilities – your attitude and passion are as important to us as your experience, qualifications and capabilities.

Applications Close

27 September 2026