Senior Penetration Tester

We’re BDO, a global professional services firm connected to local markets. Our people work together to provide specialist expertise, helping businesses achieve their goals.

We inspire others, to go further. We create together, to reach higher. We build trust, to lead purposefully.

Whether you're building your future or starting your career with us, you won’t do it alone. From creating solutions for our clients to building careers for our people, we shape what matters, and that’s where you come in.

As a Senior Penetration Tester, you will lead offensive security engagements across enterprise, cloud, and Operational Technology (OT) environments, supporting government, critical infrastructure, and commercial organisations.

You will help clients understand how real-world threat actors could compromise their environments through penetration testing, Red Team exercises, adversary emulation, and security validation activities. This role combines deep technical expertise with client engagement, mentorship, and capability development, providing the opportunity to work on some of Australia's most critical and sensitive systems.

As part of BDO's Cyber Security team, you will work alongside experienced offensive security professionals, delivering complex assessments across Active Directory, cloud platforms, enterprise infrastructure, industrial control systems, and emerging technologies.

Key Responsibilities

• Lead and deliver penetration testing, Red Team, Purple Team, and adversary simulation engagements.
• Conduct security assessments across enterprise infrastructure, Active Directory, cloud platforms, web applications, APIs, and OT environments.
• Develop realistic threat-led attack scenarios aligned to client threat models and industry frameworks.
• Facilitate Purple Team exercises to validate detection and response capabilities.
• Identify security weaknesses and provide pragmatic, risk-based remediation recommendations.
• Present technical findings and risk insights to both technical and executive stakeholders.
• Support the development of offensive security methodologies, tooling, automation, and service offerings.
• Mentor consultants and contribute to capability development across the Cyber Security team.

About You

You are a technically skilled offensive security professional with a passion for helping organisations improve their security resilience through real-world security testing and adversary simulation.

Essential Skills and Experience

• Demonstrated experience delivering penetration testing, Red Team, adversary simulation, or Purple Team engagements.
• Strong understanding of enterprise technologies, including Active Directory, Windows, Linux, networking, and cloud environments.
• Experience identifying, exploiting, and demonstrating complex attack paths within enterprise environments.
• Practical experience testing web applications, APIs, cloud services, and enterprise infrastructure.
• Strong written and verbal communication skills, with the ability to explain technical concepts to both technical and non-technical audiences.
• Experience producing high-quality technical reports and executive-level summaries.
• Experience developing scripts or tooling using Python, PowerShell, Bash, C#, or similar languages.
• Conducting OT/ICS security assessments, threat-led testing, or security reviews within critical infrastructure sectors such as energy, utilities, transport, water, or manufacturing.
• Assessing industrial network architectures, industrial protocols, remote access solutions, and OT security controls, with familiarity of industry frameworks such as IEC 62443 and NIST 800-82.

Preferred Certifications

While certifications are not mandatory, the following are highly regarded:

• Offensive Security certifications such as OSCP, OSEP, OSWE, OSED, OSCE3, CRTO, CRTM, or equivalent.
• Cloud and security certifications such as CISSP, SC-100, AZ-500, AWS Security Specialty, or equivalent.

Why BDO?

Working for BDO you will be part of a growing and market leading professional services firm.

Our national and global footprint provides our people with opportunities to work on interesting client engagements, across diverse industry sectors and services.

Our open and collaborative culture ensures access to Partners and professional mentors, to guide and accelerate your professional career, across a wide array of career pathways.

We provide our people with various health and wellbeing, social, financial, and professional development benefits to help realise what’s possible.

Participate in fitness challenges or take advantage of exclusive discounts to corporate health insurance, gym memberships and wellness facilities via our BWell program. Access benefits such as travel perks, retail discounts, employee referral rewards, study, and professional development support.

Our leave options cater to the unique needs of our people; and include enhanced family support, cultural and religious leave, and options to purchase additional leave. You can also give back and get involved in community initiatives via our BCaring program.

With a strong focus on learning and growth, we provide on the job training and formal development programs to help you succeed in your role and develop your skills and experience.

Our culture is underpinned by our core values (One, Bold, Human, Heart and Strive).

We are proud to be recognised as an Inclusive Employer for 2025-2026 by Diversity Council of Australia and a  2024-2025 Employer of Choice for Gender Equality by the Workplace Gender Equality Agency (WGEA).

BDO is committed to inclusive and accessible recruitment practices. If you require any reasonable adjustments to support your application or interview process, we encourage you to contact our Talent Acquisition team at recruitment@bdo.com.au