Penetration Tester

Overview

In this role you will contribute to Lloyds Banking Group’s security testing efforts, strengthening the group’s defenses across web, API, mobile, infrastructure, and cloud assets. You’ll work within the Security Testing team to plan, execute, and report engagements and help design scalable detection mechanisms. The role sits in a regulated environment, offering opportunities to impact security posture at scale. You’ll collaborate with cross-functional teams to enable safe, rapid product change.

Pay / Benefits

• Generous pension contribution up to 15%
• Annual bonus award (group performance)
• Share schemes including free shares
• Discounted shopping benefits
• 30 days holiday including bank holidays
• Wellbeing initiatives and parental leave policies

Responsibilities

• Plan, execute and report on penetration testing engagements across web, API, mobile, infrastructure and cloud assets
• Perform manual exploitation and post-exploitation activities
• Review findings to ensure high-quality outputs
• Contribute to the design of repeatable detection mechanisms that identify recurring weaknesses at scale
• Support the delivery of offensive security testing across a wide range of technologies and platforms
• Strengthen the Group’s security posture through proactive testing and collaboration with stakeholders

Key requirements

• Significant experience as a penetration tester
• Strong experience in at least three areas: Web, API, Mobile, Infrastructure, Cloud (including cloud-native technologies) or AI testing
• Relevant security testing certifications (CREST CRT/CCT, OSCP, OSCE, GPEN, GXPN)
• Demonstrable knowledge of OWASP Top 10 and common security vulnerabilities
• Strong analytical and problem-solving skills
• Excellent communication with technical and non-technical stakeholders
• Collaborative approach and commitment to continuous learning

• Analytical and problem-solving
• Excellent communication
• Collaborative mindset
• Web testing
• API testing
• Mobile testing

…