Senior Penetration Tester: Web, App & Cloud Security

London Stock Exchange Group; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

London Stock Exchange Group is seeking a Senior Penetration Tester to join our internal offensive security team. This role is hands-on and deeply technical, responsible for planning and executing penetration tests across a wide range of systems and applications.

The ideal candidate will own engagements end-to-end, document findings with actionable remediation guidance, and collaborate with application teams to improve security posture.

Qualifications

• Hands-on pentesting of web apps, APIs, thick clients, and cloud/infrastructure.
• Proficiency with Burp Suite and standard command-line tools.
• Ability to write and automate custom scripts.
• Strong knowledge of app security, networks, and OS.
• Experience with AWS/Azure/GCP and Docker/Kubernetes.
• Fluent English, written and spoken.
• Experience in large enterprise environments.
• Relevant certifications are a plus.

Responsibilities

• Conduct in-depth penetration tests across applications, infrastructure, and cloud.
• Own engagements end-to-end with limited oversight.
• Document findings clearly with actionable remediation guidance.
• Collaborate with application teams to scope, execute, and report.
• Develop testing methodologies and automation improvements.
• Stay current with emerging threats and techniques.

Skills

Penetration testing

Burp Suite

Cloud platforms

Docker/Kubernetes

Report writing

Stakeholder communication

Automation scripting

Threat modeling

Large enterprise experience

Tools

Burp Suite

Command-line tools

Job description

London Stock Exchange Group is seeking a Senior Penetration Tester to join our internal offensive security team. This role is hands-on and deeply technical, responsible for planning and executing penetration tests across a wide range of systems and applications.

The ideal candidate will own engagements end-to-end, document findings with actionable remediation guidance, and collaborate with application teams to improve security posture.