Principal Penetration Tester

1 day ago

Melbourne, Victoria, Australia Commonwealth Bank of Australia Full time $120,000 - $180,000 per year
Your Role

The Cyber Security Team protects the bank and our customers from theft, losses and risk events through effective and proactive management of cyber security, privacy and operational risk.

The Security Testing Centre of Excellence (COE) conducts simulated cyber-attacks to ensure systems are safe, sound, and secure by performing security assessments of the Group's technology. This ensures our applications and infrastructure are adequately robust to resist cyber-attacks. Our work seeks to identify security weaknesses using real-world attack scenarios and provide recommendations to assist remediation efforts.

Do Work That Matters

You will lead and perform technical penetration testing activities designed to ensure the bank maintains its risk and security posture at desired levels. You will communicate security issues to both technical and non-technical stakeholders and provide subject-matter expertise across business units. You will mentor junior team members and contribute to the development of innovative solutions to complex technical challenges. This role reports directly to a Centre within the Penetration Testing team.

Your Responsibilities
  • Lead and conduct penetration testing and security testing including (but not limited to) web applications, infrastructure, networks, cloud (especially AWS), SaaS, LLM, and mobile applications
  • Develop Security Testing plans for business units. Coordinate squads of testers in delivering a large programme of testing engagements, using agile methodologies to track progress, and to resolve blockers.
  • Carry out scoping and planning activities to determine components to be tested, approach, methodologies, and appropriate levels of test rigour
  • Create comprehensive exploitation strategies that identify exploitable technical or operational vulnerabilities to demonstrate business impact and articulate risk.
  • Report results of testing and their implications to stakeholders including suppliers, project owners, product crews, and leadership
  • Drive advancements in attack techniques, hardware, software, and other technologies and their implications. Develop new testing methodologies and techniques, contributing to the penetration testing craft across the CoE. Provide technical mentorship and guidance to junior staff
  • Mentor junior team members and graduates
  • Ensure all tasks align with internal policies and external regulatory requirements
What You Will Need to Succeed
  • Expert-level understanding of vulnerability identification and penetration testing methodologies
  • Deep knowledge of software exploitation, security principles, and secure design, with experience conducting penetration testing safely in critical infrastructure environments
  • Advanced industry accreditations such as Offensive Security Certified Professional (OSCP), GIAC Exploit Researcher and Advanced Penetration Tester (GXPN), or similar are desirable
  • Experience in incorporating a broad range of automated tools such as Kali Linux, Burp Suite, Metasploit, and others to expand test coverage.
  • Experience in vulnerability research, developing security testing tools and methodologies.
  • Ability to develop or recommend analytic approaches to novel problems
  • Ability to communicate complex information clearly and confidently
  • Tertiary qualifications in Software Engineering, Computer Science, Cyber Security, or a related discipline
  • Membership or participation in relevant industry associations
If you're already part of the Commonwealth Bank Group (including Bankwest, x15ventures), you'll need to apply through Sidekick to submit a valid application. We're keen to support you with the next step in your career.

We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on

Advertising End Date: 06/11/2025

  • Penetration Tester

    3 days ago

    Melbourne, Victoria, Australia Talent – Specialists in tech, transformation & beyond Full time $80,000 - $120,000 per year

    Permanent full time opportunity with attractive salary on offerConveniently located in Melbourne CBD with WFH arrangement (3 days' in the office)Work for a high performing team within the utility industryThis well-known utility company is currently on the lookout for an experienced Penetration Tester. You will be responsible for overseeing security testing...

  • Penetration Testers

    1 week ago

    Melbourne, Victoria, Australia CyberRisk Full time

    About the businessCyberRisk is a boutique cybersecurity consulting firm and we are experiencing a huge amount of growth.  We're looking for an experienced and talented Penetration Tester to join our team  We offer a fun, flexible and supportive work environment and the opportunity to build a successful career.  When you join us you will become part of a...

  • Lead Penetration tester

    1 day ago

    Melbourne, Victoria, Australia IT Alliance Australia Full time $80,000 - $120,000 per year

    One of ourFederal government clientsseeking to engage aLead Penetration tester.Role: Lead Penetration Tester - (EL1 Level)Location of work: Canberra and MelbourneLength of contract: 12 monthsContract extensions: 24 months extension (two extensions of twelve months each)Security clearance: Must have Negative Vetting Level 1 security clearanceJob...

  • Penetration Tester

    1 week ago

    Melbourne, Victoria, Australia Baidam Solutions Pty Ltd Full time $120,000 - $180,000 per year

    Senior Penetration Tester Locations: Melbourne, Perth, or Canberra Type: Full-time, Permanent About Us:  Baidam Solutions is a multi-award-winning, profit-with-purpose cybersecurity business. We deliver industry-leading network and application security expertise, empowering organisations to achieve greater performance, productivity, and protection. Our...

  • Lead Penetration Tester

    1 day ago

    Melbourne, Victoria, Australia IT Alliance Australia Full time $80,000 - $120,000 per year

    One of ourFederal Government Clientsis seeking to engage aLead Penetration Tester - EL1. This is a long-term contractual position.Please check below all the job details:Contract Duration:03 Years (12 months initially + 24 months extension)Work Location:Only Canberra and Melbourne (03 Days office/02 Days home per week)Eligibility:You must need to have NV1...

  • Penetration Tester

    2 weeks ago

    Melbourne, Victoria, Australia Green Light Worldwide Full time $100,000 - $140,000 per year

    Leading company in its field6 month assignment (chance of extension)Based in Australia / remote workStart in OctoberGreen Light Australia are looking to engage a Pen Tester to join their team.Responsibilities:Conduct penetration tests on networks, cloud environments and applications.Perform vulnerability assessments using automated tools and manual...

  • Senior Penetration Tester

    7 days ago

    Melbourne, Victoria, Australia ITbility Full time $120,000 - $180,000 per year

    Senior Penetration TesterContract: 6 + MonthsMelbourneMy client in Melbourne looking forSenior Penetration Testerfor Contract: 6+ Months role.Kindly go through the below PD and let me know if the role suits and interests you, your friends or colleagues. You can send me your resumes/referrals atJob Description :Required Skills & ExperienceBachelor's degree in...

  • Penetration Tester

    1 week ago

    Melbourne, Victoria, Australia Baidam Pty Ltd Full time $120,000 - $180,000 per year

    Be instrumental in safeguarding businesses, leading high-quality security and ultimately shaping our digital futureAbout Us:Baidam Solutions is a multi-award-winning, profit-with-purpose cybersecurity business. We deliver industry-leading network and application security expertise, empowering organisations to achieve greater performance, productivity, and...

  • Penetration testing

    1 week ago

    Melbourne, Victoria, Australia BULLIT MANAGEMENT SERVICES LIMITED Full time $120,000 - $180,000 per year

    Senior Penetration Tester – Job DescriptionRole OverviewThe Senior Penetration Tester will lead and execute advanced penetration testing and vulnerability assessment activities across applications, networks, cloud, and infrastructure. This role requires deep technical expertise, hands-on testing skills, and the ability to communicate findings and...

  • Penetration Tester

    2 weeks ago

    Melbourne, Victoria, Australia Kaizen Global Technologies Full time $90,000 - $120,000 per year

    We are looking for talented individuals to fill a permanent position with one of our esteemed global clientsLocation: Sydney AustraliaEligibility: Candidates must have the right to work in Australia (Citizen, PR, Valid Visa holders).Key Responsibilities:Conduct extensive Vulnerability Assessments and Penetration Testing (VAPT) on systems, applications, and...