Penetration Tester
Penetration Tester
About Us
At ANZ, we're shaping a world where people and communities thrive, driven by a common goal: to improve the financial wellbeing and sustainability of our millions of customers.
About the Role
The mission of the Penetration Testing squad is to keep ANZ safe through the active identification of cyber security threat within the systems and/or services that are used or the applications that are developed.
As a Security Engineer (Penetration Testing), you independently design and execute standard penetration tests using established methodologies. You analyse findings, assess risk, and produce clear, actionable reports that support effective remediation and risk reduction.
Banking is changing and we’re changing with it, giving our people great opportunities to try new things, learn and grow. Whatever your role at ANZ, you’ll be building your future, while helping to build ours.
Role Type: Permanent
Role Location: Melbourne
Work Hours: Full-Time
What will your day look like?
These roles are accountable for:
- Plan and execute penetration tests for small to medium‑complexity systems
- Combine manual and automated techniques to validate vulnerabilities
- Research and apply attack techniques relevant to the environment
- Analyse findings and assess technical and business impact
- Produce clear reports with practical remediation guidance
- Retest fixes and validate remediation outcomes
- Collaborate with engineering teams to explain findings and risk
What will you bring?
To grow and be successful in this role, you will ideally bring the following:
- 5+ years hands‑on penetration testing or equivalent security experience
- Industry certifications (e.g. OSCP, CEH, GPEN, CRTP) desirable
- Experience in performing penetration testing of various application types including web, web services, APIs, mobile and thick client.
- Strong understanding of application, network, and infrastructure security testing
- Ability to distinguish false positives from real risk
- Familiarity with frameworks such as OWASP and CWE
- Clear written and verbal communication with technical stakeholders
- Strong understanding of threats, vulnerabilities, risks, exploits and associated security testing
- Experience in running through multiple exploitation scenarios as part of penetration testing activity
- Experience in the execution of security testing using automated tools (dynamic application security testing tools) and manual techniques
- Exposure to various development environment and related processes including source code repositories, build and deployment pipelines, artefact repositories.
- A desire to continuously learn new techniques / technologies and bring innovative ideas into the squad
You’re not expected to have 100% of these skills. At ANZ a growth mindset is at the heart of our culture, so if you have most of these things in your toolbox, we’d love to hear from you.
So why join us?
From the moment you join ANZ, you'll be doing meaningful work that will shape a world where people and communities thrive.
But it's not just our customers who'll feel your impact. You'll feel it too. Because at ANZ, you'll have the resources, opportunities, and support you need to take the next big step in your career.
We're a diverse bunch at ANZ in different roles, different locations, doing different things. That's why we have a range of flexible working arrangements, so our people can 'make work, work for them'. We also provide a range of benefits including access to health and wellbeing services and discounts on selected products and services from ANZ and more.
At ANZ, you'll be part of an organisation where the different backgrounds, perspectives and life experiences of our people are celebrated. That's because we're committed to building a workplace that reflects the diversity of the communities we serve. We welcome applications from everyone and encourage you to talk to us about any adjustments you may require to our recruitment process or the role itself. If you're a candidate with a disability or access requirement, and have an enquiry about the support provided, please let us know on your application or visit ANZ Accessibility and Inclusion Programs for alternate contact methods.
To find out more about working at ANZ, visit https://www.anz.com.au/careers. You can apply for this role by visiting ANZ Careers and searching for reference number 116542 .
Job Posting End Date
18/08/2026 , 11.59pm, (Melbourne Australia)