Senior Penetration Tester - must be Auckland based

We're looking for someone to join our Auckland office to take charge on penetration testing of client's applications and environments, have the tenacity to solve complex problems, and discuss real world impacts with key stakeholders.

We have an existing team of technical directors and senior consultants already in Auckland, so you'll be joining a cutting-edge team looking to expand.

You'll be involved in the pre-sales scoping to ensure that engagements are scaled appropriately and take into consideration the custom nature of our customers environments. No two jobs are ever the same.

Our Offensive Security team is integral to the successful running of our busy cybersecurity consultancy with offices in New Zealand and Australia. Security is treated as the key service of the business rather than blocker or necessary hurdle.

The role

This is a fast-paced and varied role, working closely with an exciting range of clients across New Zealand and afar, from small kiwi-owned businesses to well-known public sector organisations, to some of the largest businesses in the world. You will be involved in the full engagement lifecycle including, scoping, setup, testing, reporting, internal QA, summary meetings, and engaging with clients to utilise your specialist skills to have issues resolved.

The main responsibilities of the role are:

• Leading and delivering client engagements and projects, ensuring timely and high-quality delivery of your own and other consultants’ work.
• Pre-sales scoping to ensure that engagements are fit for purpose.
• Web application penetration testing, network penetration testing, mobile application penetration testing, cloud security reviews, source code reviews, and general security consulting.
• Produce high-quality reports on issues that you identify.
• Nurture and grow our client base.

Who we’re looking for

A results orientated, high performer across the penetration testing domain, adding exceptional value to the clients you work with.

Someone supportive and collaborative, assisting others through their technical journey, whilst also keeping up to date and getting involved in research and tooling yourself.

These are the main skills and experience we’re looking for:

• 2-5 years’ experience in the security industry.
• Strong knowledge of information security.
• You’re at comfortable with penetration testing tools and methodologies. You might hold security certifications such as OSCP, OSCE, OSWE, CREST, GPEN, GWAPT, or GXPN, though this is not essential.
• Skilled at analysing information, asking questions, and solving problems.
• You manage your time effectively, take ownership of projects or tasks to deliver work on time, and use your initiative to get stuff done!
• Confidently communicate your knowledge to a range of people, whether presenting, on the phone, or writing a report or email.
• Previous experience advising clients within public and enterprise sectors.

(Note this is not an opportunity for a new graduate)

This is primarily an in-office and on-site role to meet the needs of our clients.

Due to the nature of our work, this role requires a clean criminal record. Successful applicants will be required to complete a criminal record check during the onboarding process.

Great things to include in your cover letter include:

• Published any vulnerabilities (especially if CVEs assigned).
• A security blog that you post on.
• Attended or presented at a security conference.
• Participating in Capture-the-Flag events.
• Developing and maintaining penetration testing methodologies.
• GitHub account to showcase code.
• Your own security tools.
• Participation in bug bounties on the Hackerone or Bugcrowd platforms.
  

Benefits of working for Bastion
You will work alongside an expert group of consultants and penetration testers who are dedicated to protecting others from cyber harm. The perks of being part of the Bastion team include:

• A collaborative, thoughtful team who do meaningful work and keep learning
• Mature in-house methodologies, tooling, and reporting engine
• Supportive work environment, great team culture and regular social events
• Training budget, study time allowance, regular internal training sessions and internal mentor programme
• Competitive remuneration
• Half yearly bonus scheme
• Additional leave after 2 years
• Access to a gym within a short walk of the office.

About us
Bastion Security Group provides best-in-class cybersecurity services through a high-performance culture built on quality, excellence and collaboration. Our skilled and empowered team is dedicated to achieving meaningful security outcomes and delivering lasting value for our clients.

We deliver security services across strategy, architecture, operations and compliance. Whether it’s advising on board-level risks, embedding into your teams, or responding to incidents, our experts provide actionable insight grounded in real threats and real solutions.
To learn more about our New Zealand operations, visit https://bastionsecurity.co.nz/.

Apply today
If you have the desire to help us deliver excellence for our clients, we want to hear from you.

Apply now via Seek and yes, we do read your cover letter. We want to read about how joining our team will add value to your career path and why you decided to apply for our specific role.

We'll be reviewing applications on an ongoing basis as they come in, and depending on application volume, may close the advert early. If this is your ideal next role, we'd encourage you to get in touch today!

For a confidential conversation, email careers@bastionsecurity.co.nz.