Join a leading Australian bank in a newly created Senior Penetration Testing role, working alongside a highly skilled team of cyber security specialists to identify vulnerabilities, challenge security controls and protect critical enterprise technology.
This is an opportunity to work on complex, high-impact security initiatives across a large-scale banking environment, with exposure to modern applications, cloud platforms, APIs, mobile technologies and emerging AI solutions.
You'll play a key role in strengthening the organisation's security posture, influencing remediation strategies and helping shape how offensive security evolves in response to an increasingly sophisticated threat landscape.
As a Senior Penetration Tester, you'll take ownership of advanced penetration testing and security assessments across a diverse technology environment. You'll work closely with engineering, architecture and security teams, providing practical advice and helping drive meaningful security improvements.
The role also offers exposure to emerging technologies, including LLM security, prompt injection and agentic AI attack surfaces, giving you the opportunity to explore how offensive security techniques can be applied to the next generation of enterprise technology.
Responsibilities
- Lead and execute advanced penetration testing across web applications, APIs, mobile applications, networks, infrastructure and thick-client environments.
- Identify, exploit and validate security vulnerabilities using a range of offensive security tools and techniques.
- Produce high-quality technical reports, clearly communicating findings, risk ratings and practical remediation recommendations.
- Work with technology teams to validate vulnerabilities and drive effective security remediation.
- Conduct threat modelling and risk assessments, identifying potential attack paths and weaknesses across applications and platforms.
- Assess emerging technologies, including AI/LLM applications, prompt injection vulnerabilities and agentic AI security risks.
- Contribute to the development and continuous improvement of penetration testing methodologies, security standards and vulnerability management practices.
- Oversee relationships with external penetration testing providers, ensuring quality, consistency and value from third-party engagements.
- Share knowledge and mentor junior team members, helping build technical capability across the team.
Key Skills / Experience
- Strong hands-on experience in penetration testing, offensive security or application security.
- OSCP certification highly desirable.
- Demonstrated experience testing web applications, APIs, mobile applications, networks, infrastructure and thick-client applications.
- Strong understanding of OWASP methodologies, OSSTMM and industry security testing frameworks.
- Experience with automated security testing tools and integrating security testing into development processes.
- Solid understanding of software development, secure coding principles, threat modelling and risk analysis.
- Exposure to AI security concepts, including LLM vulnerabilities, prompt injection and emerging AI attack techniques.
- Working knowledge of AWS, Microsoft Azure or Google Cloud security.
- Experience managing third-party security vendors and external testing engagements.
- A passion for knowledge sharing, mentoring and contributing to a high-performing technical team.
#J-18808-Ljbffr
Senior Offensive Security/ Penetration Tester - Enterprise Security in Sydney employer: Bluefin Resources
Join a leading financial services organisation in Sydney as an Analytics Manager, where you will play a pivotal role in shaping consumer lending risk management. Enjoy a flexible hybrid work environment, exclusive banking product discounts, and a strong commitment to your professional development with tailored learning pathways. This is an excellent opportunity to make a meaningful impact while balancing work and life in a supportive culture that values employee wellbeing.
