Penetration Tester

Barclays; Manchester; On-site; GBP 60,000 - 90,000; Full time

Job summary

Barclays is hiring a Penetration Tester at the Assistant Vice President level, based in Knutsford (Radbroke Hall) or Manchester (4 Piccadilly Place). The role involves leading security assessments across web, network and mobile environments, delivering impactful reports and collaborating with stakeholders to strengthen controls.

The candidate will engage with clients, develop testing methodologies, and contribute to policy and governance efforts while upholding Barclays Values.

Qualifications

• CREST qualification or equivalent, or working towards one.
• Experience delivering end-to-end penetration testing across web, network and mobile.
• Ability to engage with stakeholders and produce clear security reports.
• Participation in security community activities (bug bounty, Hack The Box, CTFs).
• Exposure to client or thick application testing and project timelines.
• Interest in AI security testing; familiarity with scripting or programming; no specific languages required.
• Willingness to contribute to policy development and governance.

Responsibilities

• Identify, validate and clearly communicate security vulnerabilities before exploitation.
• Develop and execute assessments, audits and threat models to identify vulnerabilities and communicate findings and recommendations to stakeholders.
• Deliver web, network, mobile and client application assessments across projects.
• Collaborate with stakeholders and IT teams to identify emerging attack techniques and support testing methodologies.
• Prepare and maintain comprehensive reports for senior stakeholders with findings and remediation guidance.
• Work with stakeholders to understand security requirements and strengthen controls across business processes and applications.
• Identify emerging vulnerabilities and cyber-attacks to develop testing methodologies.
• Advise on policy, governance and risk mitigation with other functions.
• Lead complex work, set objectives and coach colleagues; guide team members on assignments.
• Consult on complex issues and influence decision-making; develop policies and procedures.

Skills

Penetration testing

Stakeholder engagement

Security reporting

Threat modeling

Education

CREST qualification or equivalent

Job description

Salary: £60,000 - 90,000 per year

Requirements:

• We seek candidates who hold a CREST qualification or equivalent, or are working towards one.
• We expect experience delivering end-to-end penetration testing across web, network and mobile environments.
• We value the ability to engage with stakeholders, contribute to Statements of Work (SoW), and produce clear, actionable security reports.
• We value participation in the penetration testing or wider security community, such as bug hunting, Hack The Box, CTFs or hackathons.
• We welcome exposure to client or thick application testing and experience working to agreed project timelines.
• We value an interest in emerging areas such as AI security testing and familiarity with scripting or programming; no specific languages are required.
• Candidates may be assessed on critical skills relevant to success in the role, including risk and controls, change and transformation, business acumen, strategic thinking, digital and technology, and job-specific technical skills.

Responsibilities:

• We identify, validate and clearly communicate security vulnerabilities before they can be exploited, helping protect our organisation and clients.
• We develop and execute assessments, audits and threat models using penetration testing tools and techniques to identify vulnerabilities in our systems, applications and servers, and communicate findings and recommendations to stakeholders.
• We deliver web, network, mobile and client application assessments across a range of projects.
• We collaborate with stakeholders and IT teams to identify emerging cyber-attack techniques, tools and technologies, and support the development of penetration testing methodologies.
• We prepare and maintain comprehensive reports for senior stakeholders, including penetration test findings and remediation guidance.
• We work with stakeholders to understand security requirements and controls in business processes and applications or services, strengthening security posture and assurance.
• We identify emerging vulnerabilities, exploit code and cyber-attacks to develop testing methodologies and assurance activities.
• We advise and influence decision-making, contribute to policy development, and take responsibility for operational effectiveness in collaboration with other functions and business divisions.
• We lead complex work, set objectives and coach colleagues where the role has leadership responsibilities; for individual-contributor assignments, we guide team members, coordinate collaboration and identify the expertise and approaches needed to achieve outcomes.
• We consult on complex issues, advise People Leaders on escalated matters, and identify ways to mitigate risk and develop policies and procedures that support governance and control.
• We take ownership of managing risk and strengthening controls in our work, and collaborate across areas to support organisational and business objectives.
• We analyse information from multiple internal and external sources to solve problems creatively and effectively, communicate complex or sensitive information, and influence stakeholders to achieve outcomes.
• We expect all colleagues to demonstrate our Barclays Values and Mindset in their work.

Technologies:

• AI
• Support
• Mobile
• Network
• Security
• Web

More:

We are hiring a full-time Penetration Tester for our collaborative security testing team, based in Knutsford (Radbroke Hall) or Manchester (4 Piccadilly Place). The role is at Assistant Vice President level. We expect colleagues to demonstrate our Barclays Values of Respect, Integrity, Service, Excellence and Stewardship, and our Mindset to Empower, Challenge and Drive. Our People Leaders are expected to listen and be authentic, energise and inspire, align across the enterprise, and develop others.

last updated 40 week of 2026