Penetration Tester

Lloyds Banking Group; Leeds; Hybrid; GBP 49,000 - 59,000; Full time

Benefits offered by this job

Pension up to 15%

Annual bonus

Share schemes

Discounted shopping

28 days holiday

Wellbeing initiatives

Parental leave policies

Job summary

Lloyds Banking Group in the United Kingdom is seeking a Junior Penetration Tester to join the Chief Security Office's Security Testing team. You will plan, execute and report on offensive security engagements across web, API, mobile, infrastructure and cloud assets, developing your expertise in a large, regulated financial services environment.

This hybrid role requires working at least two days per week at an office site, with disability-supportive adjustments and flexible working patterns

Qualifications

• Significant experience as a penetration tester.
• Proficient in at least three areas: Web, API, Mobile, Infrastructure, Cloud or AI testing.
• Familiar with common vulnerabilities including OWASP Top 10.
• Strong analytical and communication skills.

Responsibilities

• Plan, execute and report on penetration testing engagements across web, API, mobile, infrastructure and cloud assets.
• Perform manual exploitation and post-exploitation activities.
• Review findings to ensure high-quality outputs.
• Contribute to the design of repeatable detection mechanisms.

Skills

Penetration testing

Security testing

Analytical thinking

Communication

Collaboration

Education

CREST CRT/CCT

OSCP

OSCE

GPEN

GXPN

Job description

JOB TITLE: Penetration Tester

SALARY: £48,987 - £59,000

LOCATION: Manchester, Bristol, Leeds, Edinburgh

HOURS: Full-Time

WORKING PATTERN: Our work style is hybrid, which involves spending at least two days per week, or 40% of our time, at one of our office sites. Colleagues with disabilities can be supported with workplace adjustments including hybrid working expectations in line with our Flexibility Works policy.

What you'll be doing

At Lloyds Banking Group we're driven by a clear purpose: to Help Britain Prosper. Within the Chief Security Office, our role is to protect the Group and our customers from security threats, and to enable the Group's businesses to make change to their products safely and quickly. We're looking for a curious, technically skilled and forward-thinking individual to join our Security Testing team as a Junior Penetration Tester.

You'll support the delivery of offensive security testing across a wide range of technologies and platforms, helping to strengthen the Group's security posture while developing your expertise within a large and highly regulated financial services environment. You'll plan, execute and report on penetration testing engagements across web, API, mobile, infrastructure and cloud assets, perform manual exploitation and post-exploitation activities, review findings to ensure high-quality outputs, and contribute to the design of repeatable detection mechanisms that identify recurring weaknesses at scale.

Why Join us?

If you think all banks are the same, you're wrong. We're a pioneering, fast-changing business that's shaping finance as a force for good. If you're after a role where you can have an impact and do the best work of your career, you've just found it

What we're looking for?

• Significant experience as a penetration tester
• Strong experience in at least three of the following areas: Web, API, Mobile, Infrastructure, Cloud (including cloud native technologies) or AI testing
• Relevant security testing certifications such as CREST (CRT, CCT), OSCP, OSCE, GPEN or GXPN
• Demonstrable knowledge of common security vulnerabilities, including the OWASP Top 10
• Strong analytical and problem-solving skills
• Excellent communication skills with the ability to engage confidently with both technical and non-technical stakeholders
• A collaborative approach and a passion for continuous learning and improvement

And it would be great if you had any of the following...

• Experience working within a large enterprise or regulated environment
• Exposure to building or improving in-house security testing capabilities
• Experience designing scalable detection mechanisms for recurring security weaknessesKnowledge of financial services technology environments

This is a place for you

Our ambition is to be the leading UK business for diversity, equity and inclusion, supporting our customers, colleagues and communities. We are committed to creating an environment in which everyone can thrive, learn and develop. We were one of the first major organisations to set goals on diversity in senior roles, create a menopause health package, and launch a dedicated Working with Cancer initiative.

We offer reasonable workplace adjustments for colleagues with disabilities, including flexibility in office attendance, location and working patterns. As a Disability Confident Leader, we guarantee interviews for a fair and proportionate number of applicants who meet the minimum criteria for the role and have a disability, long-term health or neurodivergent condition, through the Disability Confident Scheme. We provide reasonable adjustments throughout the recruitment process to reduce or remove barriers - just let us know what you need.

We also offer a wide-ranging benefits package, which includes

• A generous pension contribution of up to 15%
• An annual bonus award, subject to Group performance
• Share schemes including free shares
• Benefits you can adapt to your lifestyle, such as discounted shopping
• 28 days' holiday, with bank holidays on top
• A range of wellbeing initiatives and generous parental leave policies