Job Description

Senior Penetration Tester

• Lead high-impact penetration testing across modern applications, cloud and infrastructure environments.

• Join a team safeguarding the bank and helping protect customers through best-in-class cyber security outcomes.

• Work with modern tooling and evolving AI-supported security testing practices to help shape what’s next in cyber defence.

Do work that matters

Bring your ambition and we’ll help you grow, belong and shape what’s next.

As a Senior Penetration Tester, you will lead and deliver technical penetration testing that helps maintain the bank’s risk and security posture. You’ll work across web, infrastructure, networks, cloud, SaaS, mobile and emerging technologies including LLM-based applications, while partnering with stakeholders to identify security weaknesses, demonstrate business impact and support remediation.

See yourself in our team

Group Security is part of Technology and brings together cyber security, protective security, business resilience, fraud technology and cyber defence capabilities. Its purpose is safeguarding a brighter future for all by securing the bank, protecting customers, building recovery capability and creating an admired place to work.

Within this environment, Group Security Engineering is responsible for ensuring the Group embed security into everything we deliver - from customer products and enterprise platforms to security engineering culture and innovation.

Grow. Belong. Shape what’s next.

In this role, you will:

• Lead penetration testing and security testing across web applications, infrastructure, networks, cloud, SaaS, mobile and LLM-based applications.

• Scope and plan testing engagements, including test approach, methodology and level of rigour.

• Develop testing plans and coordinate testers across a broad program of engagements using agile ways of working.

• Create exploitation strategies that demonstrate risk, business impact and remediation priorities.

• Communicate findings clearly to technical and non-technical stakeholders, including suppliers, project owners and leadership.

• Mentor junior team members and contribute to the ongoing uplift of penetration testing practices, methodologies and innovation.

• Ensure testing activities align with internal policy and external regulatory requirements.

We’re interested in hearing from people who…

We know great candidates may not meet every requirement listed below. If you’re excited about this opportunity and believe your experience could add value, we’d love to hear from you.

• Demonstrated experience leading penetration testing across multiple domains such as applications, infrastructure, cloud and networks.

• Strong capability in vulnerability identification, exploitation techniques and penetration testing methodologies.

• Proven ability to communicate complex security issues clearly and confidently to a wide range of stakeholders.

• Experience developing testing approaches, planning engagements and driving outcomes across multiple concurrent activities.

• Experience mentoring others and contributing to a collaborative, inclusive team environment.

• Experience working in cloud environments, particularly AWS.

• Exposure to tools such as Kali Linux, Burp Suite, Metasploit and related security testing platforms.

• Relevant industry certifications such as OSCP, GXPN or similar are desirable.

• Experience using large language models to support penetration testing workflows is highly desirable.

• Tertiary qualifications in Software Engineering, Computer Science, Cyber Security, or a related discipline are desirable.

Working with us:

At CommBank, we're committed to creating an accessible, inclusive and respectful workplace. If you require support or adjustments, please let us know. We welcome applications from people of all backgrounds and we're particularly committed to making a positive difference for Aboriginal and/or Torres Strait Islander Peoples. For support please contact 1800 989 696.

Advertising End Date: 21/07/2026