Senior Penetration Tester

Commonwealth Bank

Senior Penetration Tester leading technical penetration testing at a bank. Collaborating across applications, cloud, and infrastructure to identify security vulnerabilities.

Posted 7/8/2026full-timeSydney • 🇦🇺 AustraliaSeniorWebsite

Tech Stack

Tools & technologies

AWSCloudCyber SecurityLinux

About the role

Key responsibilities & impact

Lead penetration testing and security testing across web applications, infrastructure, networks, cloud, SaaS, mobile and LLM-based applications.
Scope and plan testing engagements, including test approach, methodology and level of rigour.
Develop testing plans and coordinate testers across a broad program of engagements using agile ways of working.
Create exploitation strategies that demonstrate risk, business impact and remediation priorities.
Communicate findings clearly to technical and non-technical stakeholders, including suppliers, project owners and leadership.
Mentor junior team members and contribute to the ongoing uplift of penetration testing practices, methodologies and innovation.
Ensure testing activities align with internal policy and external regulatory requirements.

Requirements

What you’ll need

Demonstrated experience leading penetration testing across multiple domains such as applications, infrastructure, cloud and networks.
Strong capability in vulnerability identification, exploitation techniques and penetration testing methodologies.
Proven ability to communicate complex security issues clearly and confidently to a wide range of stakeholders.
Experience developing testing approaches, planning engagements and driving outcomes across multiple concurrent activities.
Experience mentoring others and contributing to a collaborative, inclusive team environment.
Experience working in cloud environments, particularly AWS.
Exposure to tools such as Kali Linux, Burp Suite, Metasploit and related security testing platforms.
Relevant industry certifications such as OSCP, GXPN or similar are desirable.
Experience using large language models to support penetration testing workflows is highly desirable.
Tertiary qualifications in Software Engineering, Computer Science, Cyber Security, or a related discipline are desirable.

Benefits

Comp & perks

Health insurance
Professional development opportunities
Inclusive and respectful workplace
Support for Aboriginal and/or Torres Strait Islander Peoples

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Penetration TestingVulnerability Exploitation TechniquesTesting MethodologiesTesting Approach DevelopmentRisk AssessmentExploitation StrategiesAgile MethodologiesLarge Language Models in Security Testing

Soft Skills

Clear CommunicationMentoringCollaborationStakeholder Engagement

Certifications

OSCPGXPN