Senior Offensive Security Consultant: Pen Testing & BAS

Datacom; Christchurch; On-site; NZD 120,000 - 180,000; Full time

Benefits offered by this job

Paid parental leave

24/7 Employee Assistance Programme (D-

Job summary

Datacom, NZ's leading technology services provider, seeks a Senior Cybersecurity Consultant to drive offensive security efforts across client engagements. You will conduct penetration tests, BAS campaigns, and AI red teaming, delivering actionable remediation and risk insights.

A strong emphasis on threat modelling, secure coding reviews, and adversarial thinking will define your day-to-day work. You will collaborate with the Application Security team, share insights across Datacom, and help

Qualifications

• Experience in Offensive Security and Penetration Testing in enterprise or consulting environments.
• Familiarity with BAS, AI Red Teaming, and threat modelling.
• Ability to communicate technical concepts to diverse stakeholders.

Responsibilities

• Perform comprehensive penetration testing on applications, APIs, networks, and systems.
• Design and execute BAS campaigns to test detection and response capabilities.
• Conduct AI Red Teaming assessments identifying vulnerabilities in ML models and AI‑powered apps.
• Develop attack plans, test cases and working exploits during engagements.
• Prepare reports and remediation guidance; deliver client workshops.

Skills

Offensive security

Penetration testing

Threat modelling

Executive communication

Programmable scripting (Python, Power

Adversarial testing

Education

OSCP

eWPT

GWAPT

PNPT

OSSWE

Tools

Nmap

BurpSuite

Metasploit

Cobalt Strike

BloodHound

Kali Linux

Job description

Datacom, NZ's leading technology services provider, seeks a Senior Cybersecurity Consultant to drive offensive security efforts across client engagements. You will conduct penetration tests, BAS campaigns, and AI red teaming, delivering actionable remediation and risk insights.

A strong emphasis on threat modelling, secure coding reviews, and adversarial thinking will define your day-to-day work. You will collaborate with the Application Security team, share insights across Datacom, and help