Senior Penetration Tester

Were BDO a global professional services firm connected to local markets. Our people work together to provide specialist expertise helping businesses achieve their goals.

We inspire others to go further. We create together to reach higher. We build trust to lead purposefully.

Whether youre building your future or starting your career with us you wont do it alone. From creating solutions for our clients to building careers for our people we shape what matters and thats where you come in.

As a Senior Penetration Tester you will lead offensive security engagements across enterprise cloud and Operational Technology (OT) environments supporting government critical infrastructure and commercial organisations.

You will help clients understand how real-world threat actors could compromise their environments through penetration testing Red Team exercises adversary emulation and security validation activities. This role combines deep technical expertise with client engagement mentorship and capability development providing the opportunity to work on some of Australias most critical and sensitive systems.

As part of BDOs Cyber Security team you will work alongside experienced offensive security professionals delivering complex assessments across Active Directory cloud platforms enterprise infrastructure industrial control systems and emerging technologies.

Key Responsibilities

• Lead and deliver penetration testing Red Team Purple Team and adversary simulation engagements.
• Conduct security assessments across enterprise infrastructure Active Directory cloud platforms web applications APIs and OT environments.
• Develop realistic threat-led attack scenarios aligned to client threat models and industry frameworks.
• Facilitate Purple Team exercises to validate detection and response capabilities.
• Identify security weaknesses and provide pragmatic risk-based remediation recommendations.
• Present technical findings and risk insights to both technical and executive stakeholders.
• Support the development of offensive security methodologies tooling automation and service offerings.
• Mentor consultants and contribute to capability development across the Cyber Security team.

About You

You are a technically skilled offensive security professional with a passion for helping organisations improve their security resilience through real-world security testing and adversary simulation.

Essential Skills and Experience

• Demonstrated experience delivering penetration testing Red Team adversary simulation or Purple Team engagements.
• Strong understanding of enterprise technologies including Active Directory Windows Linux networking and cloud environments.
• Experience identifying exploiting and demonstrating complex attack paths within enterprise environments.
• Practical experience testing web applications APIs cloud services and enterprise infrastructure.
• Strong written and verbal communication skills with the ability to explain technical concepts to both technical and non-technical audiences.
• Experience producing high-quality technical reports and executive-level summaries.
• Experience developing scripts or tooling using Python PowerShell Bash C# or similar languages.
• Conducting OT/ICS security assessments threat-led testing or security reviews within critical infrastructure sectors such as energy utilities transport water or manufacturing.
• Assessing industrial network architectures industrial protocols remote access solutions and OT security controls with familiarity of industry frameworks such as IEC 62443 and NIST 800-82.

Preferred Certifications

While certifications are not mandatory the following are highly regarded:

• Offensive Security certifications such as OSCP OSEP OSWE OSED OSCE3 CRTO CRTM or equivalent.
• Cloud and security certifications such as CISSP SC-100 AZ-500 AWS Security Specialty or equivalent.

Why BDO

Working for BDO you will be part of a growing and market leading professional services firm.

Our national and global footprint provides our people with opportunities to work on interesting client engagements across diverse industry sectors and services.

Our open and collaborative culture ensures access to Partners and professional mentors to guide and accelerate your professional career across a wide array of career pathways.

We provide our people with various health and wellbeing social financial and professional development benefits to help realise whats possible.

Participate in fitness challenges or take advantage of exclusive discounts to corporate health insurance gym memberships and wellness facilities via our BWell program. Access benefits such as travel perks retail discounts employee referral rewards study and professional development support.

Our leave options cater to the unique needs of our people; and include enhanced family support cultural and religious leave and options to purchase additional leave. You can also give back and get involved in community initiatives via our BCaring program.

With a strong focus on learning and growth we provide on the job training and formal development programs to help you succeed in your role and develop your skills and experience.

Our culture is underpinned by our core values (One Bold Human Heart and Strive).

We are proud to be recognised as an Inclusive Employer for 2025-2026 by Diversity Council of Australia and a 2024-2025 Employer of Choice for Gender Equality by the Workplace Gender Equality Agency (WGEA).

BDO is committed to inclusive and accessible recruitment practices. If you require any reasonable adjustments to support your application or interview process we encourage you to contact our Talent Acquisition team at