Senior Penetration Testing Lead – Security & Risk

Westpac New Zealand Ltd; Auckland; On-site; NZD 140,000 - 190,000; Full time

Benefits offered by this job

4 weeks holiday

5 wellbeing days

Banking benefits

Internal mobility and development

Recognition of performance

Volunteer days

Job summary

Westpac New Zealand Ltd is seeking a Senior Information Security Consultant (Penetration Testing) to plan, lead and deliver risk-based security testing across our technology services. You will identify exploitable weaknesses, demonstrate credible attack paths, and provide practical root-cause remediation guidance.

The role requires strong testing experience across web, API, network, cloud, and container environments, with scripting and familiarity with at least one major cloud platform.

Qualifications

• Demonstrated experience delivering penetration testing or offensive-security assessments in large enterprise environments.
• Technical depth in at least two testing domains with breadth across web, API, network, infrastructure, cloud, identity or mobile security testing.
• Strong knowledge of Windows/Linus Security, Active Directory, TCP/IP, DNS, HTTP/S and API security.
• Experience producing high-quality penetration-testing reports for technical and non-technical audiences.
• Scripting/automation using Python, PowerShell or Bash; knowledge of at least one major public cloud platform.

Responsibilities

• Plan, lead and deliver authorised, independent security testing across Westpac NZ technology services.
• Identify exploitable weaknesses, demonstrate attack paths, and provide practical remediation guidance.
• Collaborate with engineering, risk and third-party stakeholders to verify remediation and improve testing coverage and repeatability.

Skills

Penetration testing

Offensive security

Cloud security

Scripting (Python/PowerShell)

Education

Professional certification (OSCP/OSWE/OSCE3, CREST CRT/CCT, GPEN etc.)

Tools

Kubernetes

Docker

OpenShift

DevSecOps

Job description

Westpac New Zealand Ltd is seeking a Senior Information Security Consultant (Penetration Testing) to plan, lead and deliver risk-based security testing across our technology services. You will identify exploitable weaknesses, demonstrate credible attack paths, and provide practical root-cause remediation guidance.

The role requires strong testing experience across web, API, network, cloud, and container environments, with scripting and familiarity with at least one major cloud platform.