Penetration Tester

Salary: £60,000 - 90,000 per year

Requirements:

• We seek candidates who hold a CREST qualification or equivalent, or are working towards one.
• We expect experience delivering end-to-end penetration testing across web, network and mobile environments.
• We value the ability to engage with stakeholders, contribute to Statements of Work (SoW), and produce clear, actionable security reports.
• We value participation in the penetration testing or wider security community, such as bug hunting, Hack The Box, CTFs or hackathons.
• We welcome exposure to client or thick application testing and experience working to agreed project timelines.
• We value an interest in emerging areas such as AI security testing and familiarity with scripting or programming; no specific languages are required.
• Candidates may be assessed on critical skills relevant to success in the role, including risk and controls, change and transformation, business acumen, strategic thinking, digital and technology, and job-specific technical skills.

Responsibilities:

• We identify, validate and clearly communicate security vulnerabilities before they can be exploited, helping protect our organisation and clients.
• We develop and execute assessments, audits and threat models using penetration testing tools and techniques to identify vulnerabilities in our systems, applications and servers, and communicate findings and recommendations to stakeholders.
• We deliver web, network, mobile and client application assessments across a range of projects.
• We collaborate with stakeholders and IT teams to identify emerging cyber-attack techniques, tools and technologies, and support the development of penetration testing methodologies.
• We prepare and maintain comprehensive reports for senior stakeholders, including penetration test findings and remediation guidance.
• We work with stakeholders to understand security requirements and controls in business processes and applications or services, strengthening security posture and assurance.
• We identify emerging vulnerabilities, exploit code and cyber-attacks to develop testing methodologies and assurance activities.
• We advise and influence decision-making, contribute to policy development, and take responsibility for operational effectiveness in collaboration with other functions and business divisions.
• We lead complex work, set objectives and coach colleagues where the role has leadership responsibilities; for individual-contributor assignments, we guide team members, coordinate collaboration and identify the expertise and approaches needed to achieve outcomes.
• We consult on complex issues, advise People Leaders on escalated matters, and identify ways to mitigate risk and develop policies and procedures that support governance and control.
• We take ownership of managing risk and strengthening controls in our work, and collaborate across areas to support organisational and business objectives.
• We analyse information from multiple internal and external sources to solve problems creatively and effectively, communicate complex or sensitive information, and influence stakeholders to achieve outcomes.
• We expect all colleagues to demonstrate our Barclays Values and Mindset in their work.

Technologies:

• AI
• Support
• Mobile
• Network
• Security
• Web

More:

We are hiring a full-time Penetration Tester for our collaborative security testing team, based in Knutsford (Radbroke Hall) or Manchester (4 Piccadilly Place). The role is at Assistant Vice President level. We expect colleagues to demonstrate our Barclays Values of Respect, Integrity, Service, Excellence and Stewardship, and our Mindset to Empower, Challenge and Drive. Our People Leaders are expected to listen and be authentic, energise and inspire, align across the enterprise, and develop others.

last updated 39 week of 2026