Senior Penetration Tester

An opportunity has arisen with a leading enterprise organisation undergoing significant investment in cyber security and digital resilience. We are seeking an experienced Senior Penetration Tester to join a high-performing security team responsible for identifying vulnerabilities, strengthening security controls, and driving remediation across complex technology environments.

The Opportunity

As a Senior Penetration Tester, you will provide expert advice to technology and business stakeholders on security risks, vulnerabilities, and control effectiveness. You will lead penetration testing activities across a diverse environment and play a key role in improving the organisation's security posture through actionable recommendations and remediation support.

Key Responsibilities

• Conduct advanced penetration testing across web applications, APIs, mobile applications, cloud environments, networks, infrastructure, and third-party services.
• Identify, validate, and clearly communicate security vulnerabilities, risks, and remediation strategies to technical and non-technical stakeholders.
• Prepare comprehensive penetration testing reports and support remediation activities through to resolution.
• Advise on security frameworks, standards, policies, and controls across business and technology environments.
• Contribute to threat modelling, security design reviews, governance initiatives, and risk management activities.
• Support incident investigations, security documentation, compliance obligations, and continuous improvement initiatives.
• Promote security awareness and collaborate with cross-functional stakeholders to drive secure outcomes.
• Mentor and guide team members while contributing to a culture of technical excellence.

Key Requirements

• Demonstrated experience performing advanced penetration testing across web, network, application, mobile, and infrastructure environments.
• Strong background in cyber security, application security, information security, or risk management.
• Proven experience producing high-quality penetration testing reports and presenting findings to stakeholders.
• Deep understanding of risk analysis, threat modelling, and secure software development principles.
• Knowledge of security frameworks and methodologies including OWASP and OSSTMM.
• Experience with automated security testing tools and security engineering practices.
• Exposure to AI security concepts including LLM security, prompt injection, and emerging AI attack surfaces.
• Experience working within cloud environments such as AWS, Azure, or Google Cloud.
• Knowledge of container technologies including Kubernetes, Docker, OpenShift, or Podman will be highly regarded.

Aboriginal and Torres Strait Islander Peoples are encouraged to apply.
To apply please click apply or call Chane Prasongdee on 02 8289 3118 for a confidential discussion.