Penetration Tester

Overview

In this role, you help strengthen the Group’s security posture by delivering offensive security testing across multiple technologies. You will work within the Security Testing team in a large, regulated financial services environment. You plan, execute, and report on penetration engagements across web, API, mobile, infrastructure and cloud assets, contributing to scalable detection mechanisms. This is a collaborative, learning-driven opportunity in a mission-driven organisation that values expertise and impact. You’ll join a hybrid workplace and have a clear path to grow your skills in a high-stakes setting.

Pay / Benefits

• Generous pension contribution up to 15%
• Annual bonus award (subject to group performance)
• Share schemes including free shares
• Discounted shopping benefits
• 28 days’ holiday plus bank holidays
• Wellbeing initiatives and parental leave policies

Responsibilities

• Plan, execute and report on penetration testing engagements across web, API, mobile, infrastructure and cloud assets
• Perform manual exploitation and post-exploitation activities
• Review findings to ensure high-quality outputs
• Contribute to design of repeatable detection mechanisms that identify recurring weaknesses at scale
• Support delivery of offensive security testing across a wide range of technologies and platforms

Key requirements

• Significant experience as a penetration tester
• Strong experience in at least three areas: Web, API, Mobile, Infrastructure, Cloud (incl. cloud native) or AI testing
• Security testing certifications such as CREST (CRT, CCT), OSCP, OSCE, GPEN or GXPN
• Demonstrable knowledge of OWASP Top 10 vulnerabilities
• Strong analytical and problem‑solving skills
• Excellent communication skills with technical and non-technical stakeholders
• Collaborative approach and commitment to continuous learning and improvement

• Collaborative
• Analytical thinking
• Effective communication
• Web testing
• API testing
• Mobile testing

…