Barclays, Manchester, United Kingdom
Join us as an Associate Penetration Tester to contribute to the identification and remediation of security vulnerabilities across our systems and applications. In this role, you will be part of a dedicated cybersecurity team focused on assessing and strengthening the security posture of our digital infrastructure. You will support penetration testing activities, collaborate with experienced professionals, and gain exposure to a broad range of technologies and methodologies used in offensive security. This position is well‑suited for someone who has gained practical experience in security testing environments, demonstrated growth in technical capability, and is ready to take on increasingly multi‑layered tasks within a structured and supportive setting.
Key Experience
* Penetration testing of web‑based applications, REST‑based APIs, network/infrastructure, and/or web‑based applications.
* Experience writing clear and concise penetration test reports.
* Solid understanding of the web and API OWASP Top 10 security risks, at minimum.
Other Highly Valued Skills
* Programming and scripting skills.
* CREST/OSCP/SANS or equivalent penetration testing certifications.
* Awareness of secure software development practices and common exploitation techniques.
Responsibilities
* Develop and execute assessments, audits, and threat models to identify vulnerabilities within the bank’s systems, applications, and servers using penetration testing tools and techniques, and communicate key findings and recommendations to stakeholders.
* Collaborate with stakeholders and IT teams to identify emerging cyber‑attack techniques, tools, and technologies and support the development of penetration testing methodologies.
* Develop and maintain comprehensive documents and reports for senior stakeholders on penetration test findings and remediation guidance.
* Collaborate with stakeholders to understand their security requirements and controls in business processes, application/services, to enhance overall security posture and assurance.
* Identify emerging vulnerabilities, exploit codes, and cyber‑attacks to develop testing methodologies and assurance activities.
Professional Expectations
* Perform prescribed activities in a timely manner and to a high standard consistently driving continuous improvement.
* Demonstrate in‑depth technical knowledge and experience in the assigned area of expertise.
* Lead and supervise a team, guiding and supporting professional development, allocating work requirements, and coordinating team resources.
* For individual contributors, develop technical expertise and act as an advisor where appropriate.
* Partner with other functions and business areas and take responsibility for end results of operational processing and activities.
* Escalate breaches of policies/procedures appropriately and take ownership for managing risk and strengthening controls.
All colleagues will be expected to demonstrate the Barclays values of Respect, Integrity, Service, Excellence, and Stewardship – our moral compass, helping us do what we believe is right. They will also be expected to demonstrate the Barclays Mindset – to Empower, Challenge, and Drive – the operating manual for how we behave.
Seniority level
Associate
Employment type
Full‑time
Job function
Information Technology
Industries
Banking and Financial Services
#J-18808-Ljbffr