Penetration Testing Team Lead - AVP

MUFG; London; On-site; GBP 70,000 - 90,000; Full time

Job summary

A leading financial group seeks a Penetration Testing Team Lead in London to oversee information security across banking divisions. The role demands expertise in cybersecurity, management of penetration tests, and collaboration with teams to enhance defenses against cyber threats. This position offers flexibility with a hybrid working policy, valuing diversity and innovation.

Qualifications

• Minimum 3 years’ experience as a penetration tester.
• Knowledge of offensive and pentest technologies.
• Skilled in developing implants and maintaining persistence.

Responsibilities

• Developing governance structures for red team operations.
• Planning and executing penetration tests.
• Identifying security risks and vulnerabilities.

Skills

Penetration Testing

Cybersecurity

Analytical Skills

Communication Skills

Vulnerability Assessment

Job description

Social network you want to login/join with:

Penetration Testing Team Lead - AVP, London

Client: MUFG

Location: London, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Reference: a7e3c2c33d96

Job Views: 6

Posted: 12.07.2025

Expiry Date: 26.08.2025

Job Description:

Do you want your voice heard and your actions to count?

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. We are 120,000 colleagues committed to making a difference for our clients, organizations, and communities. We value building long-term relationships, serving society, and fostering sustainable growth.

Our culture emphasizes putting people first, embracing diversity, and encouraging innovation. We invest in talent, technology, and tools to empower your career.

Join MUFG, where inspiration and meaningful impact are part of the journey.

Overview of the Department/Section:

MUFG is a global financial leader headquartered in Tokyo, with approximately 350 years of history, operating in over 50 countries with around 2,300 offices and over 150,000 employees. Our services include banking, trust banking, securities, credit cards, and more.

We aim to be the most trusted financial partner worldwide, fostering a culture of integrity, responsibility, transparency, and honesty. Our subsidiaries include Bank of Tokyo-Mitsubishi UFJ, Mitsubishi UFJ Trust and Banking, Mitsubishi UFJ Securities Holdings, and MUFG Americas.

Visit our website: mufgemea.com.

Our Technology division manages all IT operations, development, and support, ensuring alignment with business strategies and long-term goals. The functions include architecture and development, risk and back-office support, front office solutions, infrastructure, program management, procurement, and IT risk and control.

Main Purpose of the Role:

To manage and control information security, IT, and information risk for MUSI, ensuring all relevant controls are in place, followed, and evidenced across the business and IT departments. The role involves liaising with international security functions and ensuring a consistent approach to controls, standards, and policies. It also includes developing and implementing strategies to protect against cyber threats, maintaining compliance, and supporting reporting to stakeholders.

Key Responsibilities:

Responsible for information/cyber security across MUFG’s banking and securities divisions. Responsibilities include:

• Developing governance structures for red team operations, training, and mentoring.
• Planning and executing penetration tests (network, web, social engineering).
• Collaborating with SOC and vendors for purple team testing.
• Identifying security risks and vulnerabilities through simulated attacks.
• Managing Red Team tools and security testing platforms.
• Leading security professionals and vendors in risk assessments.
• Reporting on findings and remediation progress.
• Collaborating with infrastructure and application teams to improve defenses.
• Staying updated on cybersecurity threats and trends.
• Creating executive summaries from technical assessments.
• Supporting security incidents and operational security tasks.
• Managing threat testing solutions and vulnerabilities.
• Availability for out-of-hours support as needed.

Skills and Experience:

• Minimum 3 years’ experience as a penetration tester.
• Skilled in developing implants and maintaining persistence within systems.
• Knowledge of malicious insider activity, organized crime, and threat actors.
• Understanding of offensive and pentest technologies.
• Ability to recommend remediations based on testing results.
• Deep understanding of APT tactics and enterprise architecture.
• Familiarity with security monitoring and SIEM tools.
• Strong analytical and communication skills for management reporting.
• Ability to document operational processes clearly.

Note: MUFG operates a hybrid work policy with 3 days in the office per week. Flexible working requests are considered.

MUFG values diversity and is committed to an inclusive culture, supporting equality and opposing discrimination based on age, gender, sexual orientation, disability, race, religion, or other factors.