Senior Penetration Testing Consultant

Westpac New Zealand; New Zealand; On-site; NZD 120,000 - 170,000; Full time

Benefits offered by this job

4 weeks standard holiday + wellbeing1

Wellbeing leave

Purchased leave options

Banking benefits

Insurance discounts

Superannuation scheme

Growth and development opportunities

Recognition program

School holiday subsidy

Volunteer days

Job summary

Westpac New Zealand is seeking a Senior Information Security Consultant (Penetration Testing) to lead authorised security testing across technology services. You will identify weaknesses, demonstrate credible attack paths, and provide practical remediation guidance to protect customers and operations.

The role involves collaborating with engineering, risk, and third-party stakeholders to validate remediation and improve testing effectiveness, coverage, and repeatability in cloud-native and

Qualifications

• Independently deliver penetration testing or offensive-security assessments in large enterprise environments.
• Depth in at least two testing domains with breadth across web, API, network, infrastructure, cloud, identity or mobile security testing.
• Strong understanding of secure coding principles and ability to perform security-focused code reviews.

Responsibilities

• Plan, lead and deliver authorised security testing across Westpac New Zealand technology services.
• Identify exploitable weaknesses, demonstrate attack paths and provide remediation guidance.
• Collaborate with engineering, risk and third-party stakeholders to verify remediation and improve testing coverage.

Skills

Penetration testing

Offensive security

Web security

API security

Network security

Cloud security

Code reviews

Scripting (Python/PowerShell/Bash)

Public cloud platforms

Security testing reports

Tools

Kubernetes

Docker

OpenShift

CI/CD security

DevSecOps tooling

Job description

Westpac New Zealand is seeking a Senior Information Security Consultant (Penetration Testing) to lead authorised security testing across technology services. You will identify weaknesses, demonstrate credible attack paths, and provide practical remediation guidance to protect customers and operations.

The role involves collaborating with engineering, risk, and third-party stakeholders to validate remediation and improve testing effectiveness, coverage, and repeatability in cloud-native and