Senior Information Security Consultant

About the Role

The Senior Information Security Consultant specializing in Penetration Testing is responsible for planning, leading, and executing authorized, independent, and risk-driven security assessments of Westpac New Zealand's technology environments.

This role focuses on identifying and validating exploitable security weaknesses securely, demonstrating credible attack vectors, outlining impacts on customers and business operations, and suggesting actionable remediation measures. Collaborating with engineering, service, risk, and third-party teams, the consultant verifies remediation efforts and strives to enhance the coverage, effectiveness, and repeatability of security testing procedures.

Additionally, the position safeguards customer data and business continuity by ensuring ethical and scoped testing. It also supports advancement in testing methods, automation tools, and evaluation of emerging technologies such as cloud-native solutions and AI-enabled services.

Key Responsibilities and Qualifications

• Proven experience independently conducting penetration tests or offensive security evaluations within large-scale enterprise contexts.
• Deep expertise in at least two security testing domains, with broad experience spanning web applications, APIs, networks, infrastructure, cloud, identity management, or mobile security.
• Strong foundation in secure coding principles and proficient at security-oriented code review.
• Comprehensive knowledge of Windows and Linux security, Active Directory, authentication and authorization mechanisms, TCP/IP networking, DNS, HTTP/S protocols, and API security.
• Ability to analyze attack pathways rigorously to accurately assess exploitability and potential business risks.
• Capability to produce detailed, high-quality penetration test reports tailored for both technical peers and non-technical stakeholders.
• Hands-on scripting or automation skills using Python, PowerShell, Bash, or comparable languages.
• Familiarity with at least one major public cloud platform.
• Exercising sound judgment on testing approvals, managing project scope, handling evidence securely, and maintaining testing safety.
• Excellent written communication, stakeholder engagement, and consulting abilities.

Preferred Experience

• Background in financial services or regulated industries.
• Experience with container security including Kubernetes, Docker, and OpenShift.
• Knowledge of security testing within CI/CD pipelines and DevSecOps environments.
• Insight into assessing AI-driven systems, agents, and language model-based applications.
• Familiarity with automated penetration testing platforms and validation of attack paths.
• Holder of recognized professional certifications such as OSCP, OSWE, OSEP, OSCE3, CREST CRT/CCT, HTB CPTS, GXPN, GPEN, or equivalent advanced SANS offensive security certifications.

Working at Westpac

• Four weeks annual leave plus five additional wellbeing days to support your best self.
• Options to purchase up to four extra weeks of leave annually.
• Access to banking perks, insurance discounts, and a superannuation plan.
• Continuous learning and growth opportunities plus encouragement for career mobility within the organization.
• Recognition and rewards for outstanding performance.
• Support during school holidays via subsidy programs to help balance family and work.
• Two designated volunteer days each year.

About Westpac

Westpac is committed to fostering a stronger and fairer New Zealand for employees, customers, and communities. With a heritage spanning over 160 years, their mission is to create better futures collaboratively.

The workplace culture embraces diversity and individuality, promoting a supportive, inclusive environment where talents and ambitions can flourish. Westpac actively encourages applications from people of all backgrounds, including neurodiverse individuals and those with chronic health conditions or disabilities, valuing attitude and passion just as much as technical skills and experience.

Application Details

Applications are open until 27 September 2026. Interested candidates should submit their CV and cover letter for consideration.