Job Summary

AVP - Penetration Tester

About the Role

Penetration Tester

At ANZ, we're shaping a world where people and communities thrive, driven by a common goal: to improve the financial wellbeing and sustainability of our millions of customers.

Role Type: Permanent

Role Location: Bengaluru

Work Hours: Regular shifts (Hybrid/Blended)

The mission of the Penetration Testing squad is to keep ANZ safe through the active identification of cyber security threat within the systems and/or services that are used or the applications that are developed.

As a Penetration Tester, you provide authoritative leadership over penetration testing strategy, execution integrity, and continuous improvement. This role ensures penetration testing delivers meaningful risk reduction, defensible assurance outcomes, and executive confidence.

Banking is changing and were changing with it, giving our people great opportunities to try new things, learn and grow. Whatever your role at ANZ, youll be building your future, while helping to build ours.

There are multiple roles available, from senior leaders to more junior positions as we look to build out our existing capability with broad influence across security engineering, technology, and risk stakeholders.

What will your day look like

- Plan, prioritise, and drive penetration testing activities across a ANZs enterprise environments
- Assure the safety, integrity, and effectiveness of penetration testing engagements
- Identify vulnerabilities across complex environments and translating findings into clear,



actionable recommendations as well as provide authoritative advice on control effectiveness and residual risk
- Shape and evolve penetration testing standards, QA, policy, and operating models
- Define risk based testing strategies aligned to the threat landscape and business priorities
- Engage with senior leaders and executives to communicate outcomes and assurance
- Assess internal capability and external providers to ensure quality and value
- Drive continual improvement and innovation in penetration testing practices

What will you bring

- 10+ years in experience in enterprise security domain with specialisation in penetration testing, as lead or principal engineer.
- Recognised industry credibility and advanced certifications (e.g. CISSP, OSCP, GPEN).
- Robust alignment with industry-standard penetration testing and other related frameworks (e.g. OWASP, PTES).
- Proven penetration testing expertise across a wide range of application and system types, including web, APIs/Microservices, mobile, thick client, AI, biometric and embedded systems.
- Deep technical capability in the penetration testing space spanning multiple domains, including cloud environments (AWS, GCP), enterprise platforms (Active Directory, Git, container platforms), and network infrastructure.




- Extensive hands-on experience across the full penetration testing lifecycle, including scoping, execution, exploitation, reporting, remediation guidance, and quality assurance.
- Proficiency in both automated/manual testing techniques and advanced exploitation methodologies, including the use of dynamic application security testing (DAST) tools and developing custom scripts for automation/exploitation.
- Advanced understanding of modern development ecosystems, including source code repositories, CI/CD pipelines, artefact management, and integration patterns for security toolsets.
- Familiarity with AI eco systems, LLM frameworks and AI penetration testing tools/platforms including using AI to refine end-to-end penetration testing lifecycle/processes.
- Demonstrated commitment to continuous improvement through research, innovation, and staying current with evolving threats, tactics, techniques, and procedures (TTPs).
- The ability to mentor and uplift team capability, including coaching junior testers and reviewing deliverables to ensure high-quality outcomes.
- Strategic and commercial acumen, with the ability to translate technical findings into business risk insights, influence security strategy, and engage effectively with senior stakeholders.

Experience Level

Executive Level

Disclaimer : This job posting & Location has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 AVP - Penetration Tester (Karnataka)
🏢 Anz
📍 Karnataka