Senior Penetration Tester

Embark on a career-defining opportunity as a Senior Penetration Tester with Lloyds Banking Group. This role offers a compelling blend of impactful work, continuous development, and a supportive, inclusive environment. If you're a seasoned penetration testing professional looking to elevate your career within a major financial institution, this could be your next significant step.

Key Advantages for Candidates:

• Strategic Impact: As part of the Chief Security Office (CSO), you'll play a crucial role in protecting the Group and its customers from evolving security threats, directly contributing to the vision of helping Britain prosper.
• In-House Expertise Growth: This position is part of an initiative to build and strengthen in-house penetration testing capabilities. This means you'll be instrumental in shaping testing methodologies, improving quality and agility, and reducing reliance on external vendors, offering you a chance to leave your mark.
• Diverse Testing Landscape: You'll engage in complex penetration testing across a broad spectrum of assets, including Web, API, Mobile, Infrastructure, and Cloud environments. This offers extensive opportunities to broaden and deepen your technical expertise.
• Leadership and Mentorship: The role actively encourages you to champion team development by mentoring and coaching junior members. This is an excellent platform to hone your leadership skills and contribute to the growth of future security talent.
• Flexible Working: Lloyds Banking Group embraces flexible working, offering hybrid arrangements. This allows for a healthy work-life balance, combining the benefits of in-office collaboration with the flexibility of remote work.
• Career Development & Growth: The Group is committed to investing in its colleagues, workplaces, and technologies. This journey of transformation provides ample opportunities for learning, growth, and professional development within a leading financial institution.
• Generous Benefits Package: Beyond the competitive salary, enjoy a comprehensive benefits package that includes a significant pension contribution, annual performance-related bonus, share schemes, lifestyle-adaptable benefits, ample holiday allowance, and robust wellbeing and parental leave policies.
• Commitment to Diversity & Inclusion: Lloyds Banking Group is dedicated to fostering a diverse, equitable, and inclusive workplace. They champion initiatives such as targeted diversity goals, specialized health packages, and support for colleagues with disabilities, creating an environment where everyone can thrive. As a Disability Confident Leader, they guarantee interviews for eligible candidates with disabilities.

Key Considerations for Your Career Path:

• Depth of Expertise Required: Candidates are expected to possess extensive penetration testing experience, including a lead role. Subject matter expertise in at least two core domains (Web, API, Mobile, Infra, Cloud) is a prerequisite, so ensure your skills align with these requirements.
• Technical Proficiency: A strong understanding of common vulnerabilities (OWASP) and attacker TTPs (MITRE ATT&CK) is essential. Demonstrable knowledge in these areas will be key.
• Certification Alignment: While experience is paramount, relevant security testing certifications such as CREST (CRT, CCT), OSCP, OSCE, GPEN, or GXPN are highly valued and expected.
• Enterprise Environment Acumen: Experience operating within large and complex enterprise environments is crucial for navigating the scale and intricacies of Lloyds Banking Group's operations.
• Continuous Learning Mindset: The cybersecurity landscape is constantly evolving. The job description highlights the importance of staying up-to-date on emerging threats, emphasizing the need for a proactive and continuous learning approach.
• Collaborative and Communicative: The role demands strong analytical thinking, effective communication skills, and the ability to engage confidently with senior stakeholders. A collaborative demeanour and a passion for mentoring are also highlighted.
• Desirable Experience: While not strictly mandatory, experience in cloud-native environments, containerised solutions, AI/LLM testing, DevOps principles, SAST/DAST, SCA, threat modelling, red/purple teaming, software development, and source code review would significantly strengthen your application.

This Senior Penetration Tester position at Lloyds Banking Group presents a significant opportunity to contribute to critical security functions, mentor a growing team, and advance your career within a forward-thinking and inclusive organization. It's an ideal role for an experienced professional seeking to make a tangible difference in the financial services sector.