Penetration Tester

About Toll Group

At Toll, we do more than just logistics - we move the businesses that move the world. Our 16,000 team members can help solve any logistics, transport, or supply chain challenge – big or small. We have been supporting our customers for more than 130 years. Today, we support more than 20,000 customers worldwide with 500 sites in 27 markets, and a forwarding network spanning 150 countries. We are proudly part of Japan Post — www.tollgroup.com

About the Role

Join Toll Group as a Penetration Tester and play a critical role in strengthening our cyber resilience. Reporting to the Cybersecurity Threat Prevention Manager, you will identify and assess vulnerabilities across applications, infrastructure, APIs and cloud environments, helping to protect our global business from evolving cyber threats. This is an opportunity to work within a collaborative Cyber team, applying offensive security expertise to improve security outcomes across a complex enterprise environment.

This position cam be based in either Brisbane, Sydney or Melbourne.

A day in the life of a Penetration Tester at Toll

• Conduct penetration testing across web applications, APIs, infrastructure and cloud platforms.
• Identify, validate and safely exploit vulnerabilities to assess business risk and security impact.
• Produce clear technical reports with actionable remediation recommendations.
• Collaborate with Technology, Cyber Critical Controls, Detection & Response and project teams to strengthen security posture.
• Participate in threat modelling, security reviews and attack surface assessments.
• Research emerging threats and enhance offensive security tools, processes and testing methodologies.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Business or a related discipline.
• Industry certifications such as OSCP, OSWE, CRTO, CRT, Security+ or equivalent highly regarded.
• Public security research, conference presentations or technical write-ups viewed favourably.
• Ability to obtain and maintain an Australian Government Security Clearance (minimum NV2).

Skills & Experience

• 3–5 years’ experience in penetration testing, offensive security or a related cyber security role.
• Demonstrated experience testing web applications, APIs, internal and external networks.
• Strong knowledge of OWASP Testing Guide, OWASP Top 10 and MITRE ATT&CK frameworks.
• Experience with tools such as Burp Suite, Nmap, Nessus, Metasploit, BloodHound and PowerShell.
• Working knowledge of Microsoft technologies, Active Directory, Entra ID and cloud platforms including Azure, AWS and/or GCP.
• Excellent analytical, investigative and stakeholder engagement skills, with the ability to communicate technical concepts clearly.

What moves you?
 

At Toll, you can help play a vital role in delivering what matters. From food, fuel, medicine and rescue services, we keep businesses and communities thriving. Every day brings change. We see that as an opportunity. To be curious. To ask the right questions. And build meaningful connections. Because finding new ways to solve problems is what we do. With a bold vision to expand our global reach, our 16,000+ people bring a passion for progress. We collaborate in friendly, caring teams, supported by approachable leaders who give us the autonomy to quickly make decisions with impact. Learn and grow with industry-leading training, alongside talented experts. Feel empowered to take on diverse challenges and new responsibilities to move you, our customers, and our world further.

Are you excited about this role but are concerned you don’t meet all the requirements? If you have similar skills and are willing to learn then we encourage you to apply anyway. We know that some people hesitate to apply for jobs unless they meet every single qualification. At Toll, we value a diverse, inclusive and authentic workplace, so if you’re interested in this role but your past experience doesn’t align perfectly then please talk to us – you may be just the right candidate for this or other roles we have coming up.

At Toll everyone is welcome including those of all ages, ethnicities, genders and abilities. 

To find out more about us visit www.careers.tollgroup.com

You must be entitled to work in Australia and be prepared to undertake pre-employment checks including a criminal history check and medical.