London Hybrid AI Security Engineer: LLM & Pen Testing

Xpand Group; Greater London; Hybrid; GBP 77,000 - 123,000; Full time

Job summary

Xpand Group is seeking an AI Offensive Security Engineer to join a banking client in London. The role focuses on AI-assisted security testing across applications and infrastructure, combining traditional security testing with AI-powered automation and code analysis.

The position involves hands-on penetration testing, vulnerability validation and security automation within a hybrid London environment. The candidate will work with LLMs, AI agents, and security tools to enhance testing workflows,

Qualifications

• Minimum 3 years' experience in Application Security, Penetration Testing or Security Engineering.
• Strong hands-on experience with SAST, DAST, vulnerability assessments and penetration testing.
• Experience testing web applications, APIs and identifying common vulnerabilities.
• Practical experience using LLMs, Generative AI or AI agents for security analysis, coding, automation or testing.

Responsibilities

• Perform application security assessments, penetration testing and vulnerability analysis using traditional and AI-assisted security tools.
• Execute SAST, DAST, web and API security assessments.
• Use LLMs and AI agents to support vulnerability identification, code analysis, test-case generation and automation.
• Configure AI models, prompts and testing workflows to improve effectiveness of security assessments.
• Conduct authorised offensive security testing in line with methodologies and rules of engagement.

Skills

Application Security

Penetration Testing

SAST/DAST

Python

AI/LLM tools

Tools

Burp Suite

OWASP ZAP

Semgrep

Checkmarx

Fortify

Job description

Xpand Group is seeking an AI Offensive Security Engineer to join a banking client in London. The role focuses on AI-assisted security testing across applications and infrastructure, combining traditional security testing with AI-powered automation and code analysis.

The position involves hands-on penetration testing, vulnerability validation and security automation within a hybrid London environment. The candidate will work with LLMs, AI agents, and security tools to enhance testing workflows,