At a Glance
- Tasks: Join our Security Testing team to conduct penetration testing and enhance security across various platforms.
- Company: Lloyds Banking Group, a pioneering financial institution committed to diversity and inclusion.
- Benefits: Generous pension, annual bonus, flexible working, and 28 days holiday plus bank holidays.
- Other info: Dynamic environment with opportunities for continuous learning and career growth.
- Why this job: Make a real impact in shaping the future of finance while developing your skills.
- Qualifications: Experience in penetration testing and knowledge of security vulnerabilities required.
The predicted salary is between 48987 - 54430 £ per year.
End Date: Monday 07 December 2026
Salary Range: £48,987 - £54,430
We support flexible working – click here for more information on flexible working options.
Flexible Working Options: Hybrid Working, Job Share
Location: Manchester, Bristol, Leeds, Edinburgh
Hours: Full-Time
Working Pattern: Our work style is hybrid, which involves spending at least two days per week, or 40% of our time, at one of our office sites. Colleagues with disabilities can be supported with workplace adjustments including hybrid working expectations in line with our Flexibility Works policy.
What you’ll be doing… At Lloyds Banking Group we're driven by a clear purpose: to Help Britain Prosper. Within the Chief Security Office, our role is to protect the Group and our customers from security threats, and to enable the Group’s businesses to make change to their products safely and quickly. We're looking for a curious, technically skilled and forward-thinking individual to join our Security Testing team as a Penetration Tester. You'll support the delivery of offensive security testing across a wide range of technologies and platforms, helping to strengthen the Group's security posture while developing your expertise within a large and highly regulated financial services environment. You'll plan, execute and report on penetration testing engagements across web, API, mobile, infrastructure and cloud assets, perform manual exploitation and post-exploitation activities, review findings to ensure high-quality outputs, and contribute to the design of repeatable detection mechanisms that identify recurring weaknesses at scale.
Why Join us? If you think all banks are the same, you’re wrong. We’re a pioneering, fast-changing business that’s shaping finance as a force for good. If you’re after a role where you can have an impact and do the best work of your career, you’ve just found it.
What we’re looking for?
- Significant experience as a penetration tester
- Strong experience in at least three of the following areas: Web, API, Mobile, Infrastructure, Cloud (including cloud native technologies) or AI testing
- Relevant security testing certifications such as CREST (CRT, CCT), OSCP, OSCE, GPEN or GXPN
- Demonstrable knowledge of common security vulnerabilities, including the OWASP Top 10
- Strong analytical and problem-solving skills
- Excellent communication skills with the ability to engage confidently with both technical and non-technical stakeholders
- A collaborative approach and a passion for continuous learning and improvement
And it would be great if you had any of the following…
- Experience working within a large enterprise or regulated environment
- Exposure to building or improving in-house security testing capabilities
- Experience designing scalable detection mechanisms for recurring security weaknesses
- Knowledge of financial services technology environments
This is a place for you… Our ambition is to be the leading UK business for diversity, equity and inclusion, supporting our customers, colleagues and communities. We are committed to creating an environment in which everyone can thrive, learn and develop. We were one of the first major organisations to set goals on diversity in senior roles, create a menopause health package, and launch a dedicated Working with Cancer initiative. We offer reasonable workplace adjustments for colleagues with disabilities, including flexibility in office attendance, location and working patterns. As a Disability Confident Leader, we guarantee interviews for a fair and proportionate number of applicants who meet the minimum criteria for the role and have a disability, long-term health or neurodivergent condition, through the Disability Confident Scheme. We provide reasonable adjustments throughout the recruitment process to reduce or remove barriers - just let us know what you need.
We also offer a wide-ranging benefits package, which includes…
- A generous pension contribution of up to 15%
- An annual bonus award, subject to Group performance
- Share schemes including free shares
- Benefits you can adapt to your lifestyle, such as discounted shopping
- 28 days’ holiday, with bank holidays on top
- A range of wellbeing initiatives and generous parental leave policies
Ready for a career where you’ll learn and thrive? At Lloyds Banking Group, we're driven by a clear purpose; to help Britain prosper. Across the Group, our colleagues are focused on making a difference to customers, businesses and communities. With us you'll have a key role to play in shaping the financial services of the future, whilst the scale and reach of our Group means you'll have many opportunities to learn, grow and develop.
We're focused on creating a values-led culture and are committed to building a workforce which reflects the diversity of the customers and communities we serve. Together we’re building a truly inclusive workplace where all of our colleagues have the opportunity to make a real difference. Join us and help drive this change, shaping the future of finance whilst working at pace to deliver for our customers.
Penetration Tester employer: Lloyds Bank plc
Lloyds Banking Group is an exceptional employer, offering a dynamic work environment in Cardiff that fosters professional growth and collaboration. With a competitive salary package, generous benefits including a robust pension scheme and flexible working options, employees are empowered to thrive both personally and professionally. The company prioritises inclusivity and well-being, ensuring that all team members can achieve their full potential while making a meaningful impact in the SME banking sector.
StudySmarter Expert Advice🤫
We think this is how you could land Penetration Tester
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Lloyds Bank plc, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Lloyds Bank plc
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Lloyds Bank plc. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Penetration Tester
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Lloyds Bank plc insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Lloyds Bank plc that you’re committed to staying ahead in the game.
How to prepare for a job interview at Lloyds Bank plc
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Lloyds Bank plc to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Lloyds Bank plc.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
