Senior Penetration Testing & Cloud Security Consultant

Jobtailor; Wellington; On-site; NZD 120,000 - 180,000; Full time

Job summary

Westpac New Zealand is seeking an experienced security tester to plan, lead and deliver authorised, independent penetration testing across technology services, identifying exploitable weaknesses and demonstrating credible attack paths with business impact.

You will provide practical root-cause remediation guidance, collaborate with engineering, risk and third-party stakeholders, and continuously improve testing coverage, including cloud-native and AI-enabled services, while ensuring safe,

Qualifications

• Demonstrated experience independently delivering penetration testing or offensive-security assessments in large enterprise environments.

Responsibilities

• Plan, lead and deliver authorised, independent and risk-based security testing across Westpac New Zealand technology services
• Identify and safely validate exploitable weaknesses
• Demonstrate credible attack paths and explain customer and business impact
• Provide practical root-cause remediation guidance
• Work with engineering, service, risk and third-party stakeholders to verify remediation
• Improve the effectiveness, coverage and repeatability of security assurance activities
• Support customer, business and operational resilience
• Ensure testing is conducted safely, ethically and within approved scope
• Evolve testing methodologies and automation capabilities
• Assess emerging technologies, including cloud-native and AI-enabled services

Skills

Penetration Testing

Offensive Security Assessments

Secure Coding Principles

Attack Path Analysis

Security-Focused Code Reviews

Windows Security

Linux Security

TCP/IP Networking

API Security

Cloud Security

Education

OSCP

OSWE

OSEP

OSCE3

CREST CRT/CCT

HTB CPTS

GXPN

GPEN

Tools

Python

PowerShell

Bash

Kubernetes

Docker

OpenShift

CI/CD Pipeline

DevSecOps

Job description

Westpac New Zealand is seeking an experienced security tester to plan, lead and deliver authorised, independent penetration testing across technology services, identifying exploitable weaknesses and demonstrating credible attack paths with business impact.

You will provide practical root-cause remediation guidance, collaborate with engineering, risk and third-party stakeholders, and continuously improve testing coverage, including cloud-native and AI-enabled services, while ensuring safe,