Senior Pen Testing Engineer - App & Network Security

State Street; Greater London; Hybrid; GBP 89,000 - 151,000; Full time

Job summary

State Street is seeking a Senior Penetration Testing Engineer to join our Penetration Testing Team within the Threat Intelligence and Assurance organization. This deeply technical role requires hands‑on expertise and operates in a regulated banking environment to ensure technically sound testing and robust remediation guidance.

You will oversee third‑party tests, lead end‑to‑end application assessments (web, API) with external partners, and drive improvements in secure design and deployment.

Qualifications

• 5+ years in penetration testing across high‑security environments.
• Experience managing third‑party penetration testing vendors and ensuring quality outcomes.
• Deep expertise in application testing (web, APIs, mobile) and understanding of enterprise attack paths.
• Strong knowledge of modern architectures (cloud-native, microservices, identity platforms, CI/CD).
• Ability to translate findings into actionable risk‑based remediation guidance and influence stakeholders.
• Nice to have: AI/LLM tools for network and application testing and configuration/security reviews.

Responsibilities

• Design and manage third‑party network penetration tests, including scoping and QA.
• Lead end‑to‑end application penetration testing (web, API) with external providers.
• Perform advanced testing across authn/authz, business logic, injection, crypto misuse, and access control.
• Establish and enforce testing standards for internal teams and external vendors.
• Deliver regulator‑ready reporting with exploitability, risk context and remediation guidance.
• Lead AI/LLM enabled testing techniques and assess enterprise AI/LLM deployments.
• Partner with engineering and infrastructure to validate remediation and strengthen secure deployment practices.

Skills

Penetration testing

Vendor management

Web/API testing

Cloud-native architectures

CI/CD security

AI/LLM in security

Remediation guidance

Education

BS/MS in relevant field

Certifications: OSCP/OSEP/OSWE, GPEN/GXPN, GWAPT, PNPT, GCPN

Job description

State Street is seeking a Senior Penetration Testing Engineer to join our Penetration Testing Team within the Threat Intelligence and Assurance organization. This deeply technical role requires hands‑on expertise and operates in a regulated banking environment to ensure technically sound testing and robust remediation guidance.

You will oversee third‑party tests, lead end‑to‑end application assessments (web, API) with external partners, and drive improvements in secure design and deployment.