Senior Penetration Tester

@ Commonwealth Bank

Overview

At CommBank, your skills as a Senior Penetration Tester help secure the bank’s systems and safeguard customer assets. You will lead and perform technical penetration testing activities, ensuring robust security standards across web, infrastructure, networks, cloud (especially AWS), SaaS, LLM, and mobile applications.

Role & Responsibilities

You will lead security assessments, coordinate squads of testers using agile methodologies, plan scoping activities, and develop detailed exploitation strategies. You will report testing results to stakeholders, mentor junior team members, and ensure compliance with internal policies and regulatory requirements.

• Conduct penetration tests on multiple platforms.
• Coordinate test squads working in agile environments.
• Communicate technical issues to diverse stakeholders.
• Mentor junior team members and share expertise.
• Develop and refine testing methodologies.

Essential Skills & Qualifications

8+ years IT Engineering experience with expert-level understanding of vulnerability identification, software exploitation and secure design. Advanced industry accreditations like OSCP, GXPN, or similar are desirable. Proficiency with automated tools such as Kali Linux, Burp Suite, Metasploit, and others is expected. A bachelor’s or master’s degree in Computer Science, Information Technology, Cyber Security or related field is required.

Impact & Contribution

In the role of Senior Penetration Tester, you will have a direct impact on maintaining the bank’s security posture through technical leadership, innovative solutions, and proactive risk management.

Key skills/competency

• Penetration Testing
• Cyber Security
• Vulnerability Assessment
• Exploitation
• Agile Methodologies
• AWS
• Automated Tools
• Mentoring
• Risk Management
• Compliance