This is a Senior IT Security Penetration Tester role with Reserve Bank of Australia based in Sydney, NSW, AU Reserve Bank of Australia Role Seniority - senior More about the Senior IT Security Penetration Tester role at Reserve Bank of Australia Exposure to diverse technologies and applications Opportunity to perform purple team engagements Do work that makes a difference This is an exciting opportunity to work in a highly mature cyber security team. This role sits within the Assessments and Testing team in the Bank’s IT security services. As part of the role, you will be working closely with a wide variety of stakeholders, liaising with project and technical teams to organise and undertake security testing against the Bank's network, perimeter, applications, and systems to identify vulnerabilities and minimise security risks for the Bank against current and emerging threats. The key aspect of this role will be to undertake regular and ad-hoc penetration testing across RBA applications and infrastructure. As part of this role, you will: Be responsible for discovering vulnerabilities in a variety of systems including web application, infrastructure, mobile and wireless systems Provide reports outlining identified vulnerabilities and present recommendations to IT and business teams Dedicate time to vulnerability research on certain high-value applications or systems Engage in purple teaming activities to ensure the Banks cyber posture can defend against relevant threats Your team You will work with a team of incredibly smart people, who are very passionate about security. It is a challenging, fast paced, and team-oriented environment with a great culture. Your background We are looking for someone who has strong experience in Network/Application penetration testing along with experience in presenting the identified vulnerabilities and recommendations to stakeholders at various levels effectively. Additionally, experience performing red/purple teaming engagements will be highly desirable. To be successful in this critical role you will possess: Experience performing a broad range of penetration testing (network, web application, mobile etc.) Knowledge of information security principles and practices, and industry standards such as CORIE, ASD's Essential Eight, and ISM In-depth knowledge of common offensive security tools (Burp Suite, Cobalt Strike, Metasploit) Comfortable programming in at least 1 language (Java, C#, Python) and knowledge of secure coding practices Ability to present technical concepts to non-technical stakeholders and explain risk in a business context Experience in conducting red/purple team engagements is beneficial but not required Your development & career Working for an organisation that truly makes a difference to the Australian people, we can offer development and career opportunities in a collaborative environment that supports people’s growth, well-being, and promotes flexibility. Application Close : October 24, 2025. Before we jump into the responsibilities of the role. No matter what you come in knowing, you’ll be learning new things all the time and the Reserve Bank of Australia team will be there to support your growth. Please consider applying even if you don't meet 100% of what’s outlined Key Responsibilities Conducting penetration testing Reporting vulnerabilities ️ Engaging in purple teaming Key Strengths Network/Application penetration testing ️ Information security principles and practices ️ Offensive security tools Programming Presentation skills Red/purple team engagements Why Reserve Bank of Australia is partnering with Hatch on this role. Hatch exists to level the playing field for people as they discover a career that’s right for them. So when you apply you have the chance to show more than just your resume. A Final Note: This is a role with Reserve Bank of Australia not with Hatch.