Penetration Tester

About Toll Group

At Toll we do more than just logistics - we move the businesses that move the world. Our 16000 team members can help solve any logistics transport or supply chain challenge big or small. We have been supporting our customers for more than 130 years. Today we support more than 20000 customers worldwide with 500 sites in 27 markets and a forwarding network spanning 150 countries. We are proudly part of Japan Post

About the Role

Join Toll Group as a Penetration Tester and play a critical role in strengthening our cyber resilience. Reporting to the Cybersecurity Threat Prevention Manager you will identify and assess vulnerabilities across applications infrastructure APIs and cloud environments helping to protect our global business from evolving cyber threats. This is an opportunity to work within a collaborative Cyber team applying offensive security expertise to improve security outcomes across a complex enterprise environment.

This position cam be based in either Brisbane Sydney or Melbourne.

A day in the life of a Penetration Tester at Toll

• Conduct penetration testing across web applications APIs infrastructure and cloud platforms.
• Identify validate and safely exploit vulnerabilities to assess business risk and security impact.
• Produce clear technical reports with actionable remediation recommendations.
• Collaborate with Technology Cyber Critical Controls Detection & Response and project teams to strengthen security posture.
• Participate in threat modelling security reviews and attack surface assessments.
• Research emerging threats and enhance offensive security tools processes and testing methodologies.

Qualifications

• Bachelors or Masters degree in Computer Science Business or a related discipline.
• Industry certifications such as OSCP OSWE CRTO CRT Security or equivalent highly regarded.
• Public security research conference presentations or technical write-ups viewed favourably.
• Ability to obtain and maintain an Australian Government Security Clearance (minimum NV2).

Skills & Experience

• 35 years experience in penetration testing offensive security or a related cyber security role.
• Demonstrated experience testing web applications APIs internal and external networks.
• Strong knowledge of OWASP Testing Guide OWASP Top 10 and MITRE ATT&CK frameworks.
• Experience with tools such as Burp Suite Nmap Nessus Metasploit BloodHound and PowerShell.
• Working knowledge of Microsoft technologies Active Directory Entra ID and cloud platforms including Azure AWS and/or GCP.
• Excellent analytical investigative and stakeholder engagement skills with the ability to communicate technical concepts clearly.

What moves you

At Toll you can help play a vital role in delivering what matters. From food fuel medicine and rescue services we keep businesses and communities thriving. Every day brings change. We see that as an opportunity. To be curious. To ask the right questions. And build meaningful connections. Because finding new ways to solve problems is what we do. With a bold vision to expand our global reach our 16000 people bring a passion for progress. We collaborate in friendly caring teams supported by approachable leaders who give us the autonomy to quickly make decisions with impact. Learn and grow with industry-leading training alongside talented experts. Feel empowered to take on diverse challenges and new responsibilities to move you our customers and our world further.

Are you excited about this role but are concerned you dont meet all the requirements If you have similar skills and are willing to learn then we encourage you to apply anyway. We know that some people hesitate to apply for jobs unless they meet every single qualification. At Toll we value a diverse inclusive and authentic workplace so if youre interested in this role but your past experience doesnt align perfectly then please talk to us you may be just the right candidate for this or other roles we have coming up.

At Toll everyone is welcome including those of all ages ethnicities genders and abilities.

To find out more about us visit