Penetration Tester – Cyber Security

About the role

The Penetration Testing squad at ANZ protects the bank by actively identifying cyber security threats across systems, services, and applications. As a Penetration Tester you will lead testing strategy, ensure execution integrity, and drive continuous improvement to reduce risk and provide executive confidence.

Key responsibilities

• Plan, prioritize and execute penetration testing across ANZ’s enterprise environments.
• Validate the safety, integrity and effectiveness of testing engagements.
• Identify vulnerabilities in complex environments and translate findings into clear, actionable recommendations.
• Shape and evolve penetration testing standards, policies and operating models.
• Define risk‑based testing strategies aligned with the threat landscape and business priorities.
• Engage senior leaders and executives to communicate outcomes and assurance.
• Assess internal capability and external providers to ensure quality and value.
• Drive continual improvement and innovation in penetration testing practices.

Required profile

• 7+ years of experience in enterprise security with a focus on penetration testing.
• Recognised industry certifications such as CISSP, OSCP or GPEN.
• Strong knowledge of industry‑standard frameworks like OWASP and PTES.
• Proven expertise testing web applications, APIs/Microservices, mobile, thick‑client, AI, biometric and embedded systems.

Required skills

• CISSP
• OSCP
• GPEN
• OWASP framework
• PTES methodology
• Web application penetration testing
• API/Microservice testing
• Mobile application testing
• AI security testing
• Biometric and embedded system testing

What we offer

• Permanent role with hybrid work model (onsite and remote).
• Opportunity to influence security strategy in a leading global bank.
• Access to continuous learning and professional development.