Senior Penetration Tester & Security Consultant

Westpac New Zealand; Auckland; On-site; NZD 140,000 - 210,000; Full time

Benefits offered by this job

4 weeks holiday

Wellbeing leave

Banking benefits

Professional development

Recognition

School holiday subsidy

Volunteer days

Job summary

Westpac New Zealand is seeking a Senior Information Security Consultant (Penetration Testing) to plan, lead and deliver authorised security assessments across technology services. You will identify exploitable weaknesses, demonstrate attack paths, and provide actionable remediation with stakeholders across engineering, risk and third parties.

The role requires deep security testing experience in multiple domains, strong secure-coding knowledge, scripting ability, and cloud proficiency.

Qualifications

• Experience delivering penetration testing in large enterprise environments.
• Depth in at least two testing domains with breadth across web, API, network, cloud, identity or mobile security testing.
• Strong understanding of secure coding principles and code reviews.
• Strong knowledge of Windows Security, Linux Security, Active Directory, Authentication and Authorization, TCP/IP Networking, DNS, HTTP/S, and API Security.
• Ability to analyse attack paths and accurately determine exploitability and business risk.
• Experience producing high-quality penetration-testing reports for both technical and non-technical audiences.
• Practical scripting and/or automation capability using Python, PowerShell, Bash or similar languages.
• Working knowledge of at least one major public cloud platform.
• Strong judgement regarding approvals, scope management, evidence handling and testing safety.
• Excellent written communication, stakeholder engagement and consulting skills.

Responsibilities

• Plan, lead and deliver authorised, independent security testing across technology services.
• Explain customer and business impact and provide practical remediation guidance.
• Collaborate with engineering, risk and third-party stakeholders to verify remediation and improve testing coverage and repeatability.
• Support evolution of testing methodologies, automation capabilities and cloud-native/AI-enabled assessments.

Skills

Penetration testing

Security testing breadth

Secure coding

Windows security

Linux security

Active Directory

Attack-path analysis

Security reporting

Scripting/Automation

Cloud platforms

Testing governance

Communication skills

Tools

Kubernetes

Docker

OpenShift

CI/CD tooling

Job description

Westpac New Zealand is seeking a Senior Information Security Consultant (Penetration Testing) to plan, lead and deliver authorised security assessments across technology services. You will identify exploitable weaknesses, demonstrate attack paths, and provide actionable remediation with stakeholders across engineering, risk and third parties.

The role requires deep security testing experience in multiple domains, strong secure-coding knowledge, scripting ability, and cloud proficiency.