Penetration Tester

Overview

As a Penetration Tester, you will lead penetration tests and assess vulnerabilities across internal systems and security controls. You strengthen our security posture through ongoing testing, actionable remediation guidance, and collaboration with stakeholders. You will support cross-functional teams in improving security controls and provide technical assurance to risk and detection teams. You will also develop automation and tooling to enhance the team’s output while mentoring others. This role offers the chance to influence security at scale within a world-class quant platform.

Pay / Benefits

• Highly competitive compensation
• annual discretionary bonus
• Lunch provided via Just Eat for Business
• dedicated barista bar
• 35 days’ annual leave
• 9% company pension contributions

Responsibilities

• Perform in-depth penetration testing across technologies such as Kubernetes, Jenkins, and Windows Domain Services
• Deliver remediation guidance toControl Owners based on identified vulnerabilities
• Support business and application owners in evaluating and improving security controls
• Provide technical consulting to Risk, Compliance and Detection Engineering teams, including control assessments
• Maintain and enhance the team’s automation, tooling, and system integrations
• Mentor and support less experienced team members

Key requirements

• Proven expertise across the full penetration testing lifecycle
• Deep understanding of vulnerability assessment practices and remediation strategies
• Strong background in technical security roles across diverse environments; familiarity with DevOps
• Experience validating security controls via manual and automated methods
• Engineering experience building automation and tooling
• Proficiency in Python, Jenkins and Ansible
• Security certifications: OSCP required; CRT or OSEP desirable
• Strong communication and interpersonal skills

• Strong communication
• Interpersonal skills
• Mentoring and knowledge sharing
• Kubernetes
• Jenkins
• Windows Domain Services

…