{"id":4131065,"url":"https://alion.io/job/te-whatu-ora-penetration-tester","title":"Penetration Tester","company":{"id":1816100,"name":"Te Whatu Ora","domain":"tewhatuora.govt.nz","url":"https://alion.io/company/tewhatuora","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New Zealand"],"countries":["NZ"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"C++","optional":false},{"name":"Java","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false}],"status":"live","first_seen_at":"2026-11-12T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-11-12T00:00:00Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Lead and support penetration testing across Health New Zealand's complex technology environment.\n\nUse offensive security expertise to identify vulnerabilities and strengthen healthcare security.\n\nJoin the Security Assurance team | Location flexible within New Zealand.\n\nHealth New Zealand | Te Whatu Ora is the country's largest employer, delivering universal public healthcare to more than five million New Zealanders.\n\nWe provide essential hospital, specialist and community health services across 80+ locations, from large urban centres to rural towns and remote communities.\n\nOur goal is to improve health outcomes for all New Zealanders by delivering equitable, accessible and innovative care.\n\nAbout the Role\n\nAs a Penetration Tester, you'll help identify and assess security weaknesses across one of New Zealand's largest and most complex technology environments.\n\nWorking within the Security Assurance team, you'll lead and support penetration testing engagements across a range of environments, including on-premises infrastructure, cloud platforms, web applications and medical devices.\n\nYou'll manage engagements from scoping and planning through to testing, exploitation, analysis and reporting. Using advanced techniques, you'll simulate real-world threat actor behaviour to understand how vulnerabilities could be exploited and the risks they present.\n\nBeyond identifying vulnerabilities, you'll assess their significance and provide clear, actionable reports and remediation advice to technical and non-technical stakeholders.\n\nYou'll also contribute to the ongoing development of the Penetration Testing Programme by improving methodologies, tools, automation and ways of working. As an experienced practitioner, you'll share knowledge and mentor others to help strengthen offensive security capability across the team.\n\nPatient safety is central to our work. All testing must be appropriately scoped, authorised and conducted within established security frameworks and approval processes.\n\nIn this role, you will:\n\nLead and support penetration testing engagements from scoping through to reporting and remediation advice.\n\nConduct advanced exploitation and vulnerability analysis across networks, applications and cloud environments.\n\nPerform web application, infrastructure and cloud penetration testing.\n\nAssess medical devices and other specialised technology environments where required.\n\nConduct source code security reviews and evaluate vulnerability exploitability and impact.\n\nSimulate real-world threat actor techniques to identify exploitable weaknesses.\n\nProduce clear reports with prioritised findings and remediation recommendations.\n\nProvide technical security advice to system owners, architects and project teams.\n\nConduct technical security compliance assessments against relevant requirements.\n\nAssess systems against Secure-by-Design standards, Health Information Security Framework (HISF) requirements and the Cyber Control Catalogue.\n\nImprove penetration testing methodologies, tools, scripts and automation.\n\nKeep up to date with emerging threats, attack techniques and offensive security tools.\n\nMentor team members and share specialist knowledge to build capability.\n\nSupport the National Security Technical Assurance Manager with programme maturity, service quality and engagement processes.\n\nAbout the Team / Service / Location\n\nYou'll join the Security Assurance team, working alongside penetration testers and security specialists to provide technical assurance across Health New Zealand.\n\nThe team works closely with the National Security Operations Centre, other security teams, Digital and Data project teams, platform and architecture teams, system owners and technical specialists.\n\nYou'll also engage with government agencies, health sector partners, vendors, security researchers and external security communities to help Health New Zealand understand and respond to an evolving threat landscape.\n\nOur technology environment is broad and complex, offering opportunities to tackle varied challenges and contribute to the ongoing development of our penetration testing capability.\n\nAbout You\n\nYou're an experienced penetration tester with a naturally curious mindset and the technical depth to investigate, validate and exploit vulnerabilities beyond automated scanning.\n\nYou enjoy taking ownership of complex engagements, making sound technical decisions and understanding the real-world impact of security weaknesses.\n\nYou're also a confident communicator who can translate complex technical findings into practical risk and remediation advice for a range of stakeholders.\n\nAs an experienced practitioner, you'll enjoy mentoring others, sharing knowledge and contributing to the development of the wider team. You understand the importance of integrity, careful planning and authorised testing, particularly within a healthcare environment where patient safety comes first.\n\nYou will bring:\n\nA Bachelor's degree in Computer Science, Cyber Security or a related discipline, or equivalent professional experience.\n\nA recognised penetration testing certification such as OSCP, GPEN or CRTO.\n\nAt least 5 years' experience in penetration testing and vulnerability assessments within complex enterprise environments.\n\nDemonstrated experience in web application, network infrastructure and cloud penetration testing.\n\nStrong programming and scripting skills using languages such as Python, PowerShell, Java or C/C++.\n\nComprehensive knowledge of cybersecurity principles, threat modelling, exploitation techniques and current attack methodologies.\n\nAbility to independently plan and conduct advanced penetration testing across diverse technology environments.\n\nExperience analysing findings and producing actionable reports for technical and non-technical audiences.\n\nStrong understanding of current threats, adversary techniques and offensive security tools.\n\nExperience mentoring others and sharing specialist technical knowledge.\n\nStrong communication, relationship-building and problem-solving skills.\n\nA strong sense of accountability and responsibility for delivering outcomes.\n\nEligibility to obtain and maintain an appropriate New Zealand Government security clearance.\n\nIt would be advantageous if you also have:\n\nAdditional offensive security certifications such as OSWE, OSEP or GWAPT.\n\nExperience in healthcare, critical national infrastructure or other regulated environments.\n\nExperience with medical device or operational technology security testing.\n\nExperience assessing systems against frameworks such as NZISM or HISF.\n\nExperience with red team or adversary simulation techniques.\n\nExperience implementing Te Tiriti o Waitangi in action.\n\nWorking for Health New Zealand\n\nHealth New Zealand | Te Whatu Ora is committed to delivering excellent healthcare for all New Zealanders. We embrace diversity and inclusion so that our workforce reflects the communities we serve. We welcome applications from our diverse Māori, Pacific, disabled and rainbow communities.\n\nWe're also committed to creating an environment where people can bring their ideas, challenge the way things are done and continuously improve how we work.\n\nHow to Apply\n\nTo apply, please click Apply now. All applications must be submitted through our online careers portal by 11:59pm on Thursday, 26 November 2026.\n\nFor any questions about the role, please contact Ash Mohan at .","description_format":"text","description_chars":7432,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Hospitals & Health Systems","Public Health & Prevention"],"lifecycle":[{"event":"open","at":"2026-11-12T02:26:50Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":15,"reasons":["seen:2","velocity","win:early"],"computed_at":"2026-11-14T05:58:10Z"},"pay":null,"html_url":"https://alion.io/job/te-whatu-ora-penetration-tester","json_url":"https://alion.io/job/te-whatu-ora-penetration-tester.json","meta":{"generated_at":"2026-11-14T18:12:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21482,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1816100},"rest":"https://alion.io/mcp/rest/get_company?id=1816100"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fte-whatu-ora-penetration-tester"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fte-whatu-ora-penetration-tester"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fte-whatu-ora-penetration-tester"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/te-whatu-ora-penetration-tester\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fte-whatu-ora-penetration-tester"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4131065}},{"tool":"search_jobs","arguments":{"company":"tewhatuora.govt.nz","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4131065},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}