LBG

Penetration Tester

In short

This role involves planning, executing and reporting on penetration testing engagements across web, API, mobile, infrastructure and cloud assets for a large financial services organisation's internal security testing team. It requires significant penetration testing experience, strong skills in at least three of web/API/mobile/infrastructure/cloud/AI testing, relevant certifications (CREST, OSCP, OSCE, GPEN or GXPN), and knowledge of the OWASP Top 10. The job is hybrid, based at one of several UK office sites, with strong analytical and communication skills demanded alongside technical depth.

Job Title
Penetration Tester
Salary: £48,987 - £59,000
Location: Manchester, Bristol, Leeds, Edinburgh
Hours: Full-Time
Working Pattern: Our work style is hybrid, which involves spending at least two days per week, or 40% of our time, at one of our office sites. Colleagues with disabilities can be supported with workplace adjustments including hybrid working expectations in line with our Flexibility Works policy.
What you'll be doing…
At Lloyds Banking Group we're driven by a clear purpose: to Help Britain Prosper. Within the Chief Security Office, our role is to protect the Group and our customers from security threats, and to enable the Group's businesses to make change to their products safely and quickly. We're looking for a curious, technically skilled and forward-thinking individual to join our Security Testing team as a Junior Penetration Tester.
You'll support the delivery of offensive security testing across a wide range of technologies and platforms, helping to strengthen the Group's security posture while developing your expertise within a large and highly regulated financial services environment. You'll plan, execute and report on penetration testing engagements across web, API, mobile, infrastructure and cloud assets, perform manual exploitation and post-exploitation activities, review findings to ensure high-quality outputs, and contribute to the design of repeatable detection mechanisms that identify recurring weaknesses at scale.
What we're looking for?
•Significant experience as a penetration tester
•Strong experience in at least three of the following areas: Web, API, Mobile, Infrastructure, Cloud (including cloud native technologies) or AI testing
•Relevant security testing certifications such as CREST (CRT, CCT), OSCP, OSCE, GPEN or GXPN
•Demonstrable knowledge of common security vulnerabilities, including the OWASP Top 10
•Strong analytical and problem-solving skills
•Excellent communication skills with the ability to engage confidently with both technical and non-technical stakeholders
•A collaborative approach and a passion for continuous learning and improvement
And it would be great if you had any of the following...
•Experience working within a large enterprise or regulated environment
•Exposure to building or improving in-house security testing capabilities
•Experience designing scalable detection mechanisms for recurring security weaknesses
•Knowledge of financial services technology environments
Benefits
•A generous pension contribution of up to 15%
•An annual bonus award, subject to Group performance
•Share schemes including free shares
•Benefits you can adapt to your lifestyle, such as discounted shopping
•28 days' holiday, with bank holidays on top
•A range of wellbeing initiatives and generous parental leave policies

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot