Penetration Tester: Web, Network & Mobile Security

Barclays; Knutsford; On-site; GBP 65,000 - 95,000; Full time

Job summary

Barclays is seeking a Penetration Tester to identify and validate security vulnerabilities across web, network, mobile, and client applications. You will work in a collaborative security testing team, delivering high-quality assessments across projects and communicating findings to stakeholders for meaningful action.

The role requires CREST qualification (or progress toward one) and experience delivering end-to-end testing, with strong reporting and SoW contributions.

Qualifications

• Holding a CREST qualification (or equivalent), or working towards one.
• Delivering end-to-end penetration testing across web, network, and mobile environments.
• Engaging with stakeholders, contributing to Statements of Work (SoW), and producing clear, actionable security reports.

Responsibilities

• Develop and execute assessments, audits, and threat models to identify vulnerabilities in systems, applications and networks.
• Collaborate with stakeholders and IT teams to identify emerging attack techniques and support testing methodologies.
• Prepare comprehensive reports for senior stakeholders with findings and remediation guidance.
• Collaborate with stakeholders to understand security requirements and controls in business processes to enhance security posture.
• Identify emerging vulnerabilities and testing approaches to strengthen assurance activities.

Skills

CREST qualification

End-to-end penetration testing

Stakeholder engagement & reporting

Job description

Barclays is seeking a Penetration Tester to identify and validate security vulnerabilities across web, network, mobile, and client applications. You will work in a collaborative security testing team, delivering high-quality assessments across projects and communicating findings to stakeholders for meaningful action.

The role requires CREST qualification (or progress toward one) and experience delivering end-to-end testing, with strong reporting and SoW contributions.