Senior Penetration Tester

Responsibilities

• Develop and execute assessments, audits, and threat models to identify vulnerabilities within bank systems, applications, and servers.
• Communicate key findings and remediation recommendations to senior stakeholders through comprehensive documentation and reporting.
• Collaborate with IT teams to identify emerging cyber-attack techniques and support the development of advanced penetration testing methodologies.
• Partner with stakeholders to understand security requirements and enhance the overall security posture of business processes and services.
• Lead complex assignments and guide team members, providing technical expertise and coaching to ensure operational effectiveness.
• Identify emerging vulnerabilities and exploit codes to proactively strengthen organizational controls and governance.

Requirements

• Practical experience in delivering penetration testing or related cybersecurity fields.
• Proficiency in testing technical domains including Web-based Applications, Network/Infrastructure, APIs, Mobile Apps, and Cloud environments.
• Strong understanding of security mechanisms for Operating Systems, Databases, Virtualization, and AI/LLMs.
• Familiarity with cloud-native environments, container security, and infrastructure-as-code.
• Excellent communication and collaboration skills with the ability to influence decision-making and explain complex technical information.

Preferred Qualifications

• Relevant industry certifications such as CREST, OSCP, or SANS.
• Experience in Red/Purple teaming, including adversary emulation and understanding attack paths.
• Experience with enterprise vulnerability management, including research and scanning processes.
• Knowledge of wider SDL activities such as threat modeling and design reviews.
• Familiarity with industry frameworks like OWASP, MITRE ATT&CK, NIST CSF, and DORA.

Benefits

• Competitive medical, dental, and vision coverage.
• 401(k) retirement plan and life insurance.
• Eligibility for incentive awards.
• Generous paid leave for qualifying circumstances.

About the Company

Barclays is a leading global financial institution dedicated to redefining the future of banking through innovation and security. Our Penetration Testing team provides core cyber assurance services to protect our global infrastructure and help craft secure, innovative solutions for our clients.