At a Glance
- Tasks: Conduct hands-on penetration tests and uncover vulnerabilities in various systems.
- Company: Join a leading tech firm focused on offensive security in London.
- Benefits: Competitive salary, flexible working options, and opportunities for professional growth.
- Why this job: Make a real impact by enhancing security and protecting vital systems.
- Qualifications: Experience in penetration testing and strong technical skills required.
- Other info: Collaborative team environment with a focus on continuous improvement and innovation.
The predicted salary is between 43200 - 72000 Β£ per year.
LSEG is seeking a Senior Penetration Tester to join our internal offensive security team. This role is hands-on and deeply technical, responsible for planning and driving penetration tests across a wide range of systems and applications. The successful candidate will be a skilled offensive security professional with a passion for uncovering vulnerabilities and improving security posture through thorough testing and teamwork.
Key Responsibilities- Conduct in-depth penetration tests on applications, infrastructure, and cloud environments.
- Take full ownership of assigned penetration testing engagements end-to-end and deliver with limited oversight.
- Compile technical scoping documents, track and document assessment metadata.
- Document findings clearly and concisely, providing actionable remediation guidance.
- Collaborate with application teams to scope, perform, and report on security assessments.
- Contribute to team improvement efforts and ensure all initiatives and feedback are well documented for future references.
- Stay ahead of emerging threats, vulnerabilities, and offensive security techniques.
- Participate in R&D initiatives as guided from leadership.
- Support educational sessions and mentoring within the team.
- Develop and maintain custom tools, scripts, and exploits to support testing activities.
- Proven hands-on experience in penetration testing of Web Applications, APIs, Thick Client and Common Infrastructures (Active Directory, Cloud and Cloud-native based environments).
- Proficiency with tools such as Burp Suite, common command-line tools, and ability to write custom scripts when needed.
- Experience in automating pentesting tasks.
- Solid understanding of application security, network protocols, and operating systems.
- Experience with cloud platforms (AWS, Azure, GCP) and containerised environments (Docker, Kubernetes).
- Ability to write clear, technical reports and communicate findings to both technical and non-technical customers.
- Proficient interpersonal skills in English, both written and verbal.
- Relevant certifications and engagement with the security community is a plus.
- Threat Modelling experience is a plus.
- Proven track record of successfully managing and driving security engagements for various organisations with differing operational and technical profiles.
- Ability to identify, assess, and communicate technical and project risks to partners.
- Understanding project requirements and aligning results with agreed-upon objectives and timelines.
We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyoneβs race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law.
Senior Penetration Tester in London employer: LSEG
Contact Detail:
LSEG Recruiting Team
StudySmarter Expert Advice π€«
We think this is how you could land Senior Penetration Tester in London
β¨Tip Number 1
Network like a pro! Reach out to folks in the industry, attend meetups, and join online forums. The more connections you make, the better your chances of landing that Senior Penetration Tester role.
β¨Tip Number 2
Show off your skills! Create a portfolio showcasing your penetration testing projects, tools you've developed, or any vulnerabilities you've uncovered. This will give potential employers a taste of what you can bring to the table.
β¨Tip Number 3
Prepare for interviews by brushing up on common penetration testing scenarios and methodologies. Be ready to discuss your past experiences and how you tackled specific challenges in your previous roles.
β¨Tip Number 4
Don't forget to apply through our website! We love seeing candidates who are genuinely interested in joining our team. Plus, it makes it easier for us to keep track of your application.
We think you need these skills to ace Senior Penetration Tester in London
Some tips for your application π«‘
Tailor Your CV: Make sure your CV is tailored to the Senior Penetration Tester role. Highlight your hands-on experience with penetration testing, especially in web applications and cloud environments. We want to see how your skills align with our needs!
Showcase Your Projects: Include specific examples of past penetration testing engagements you've led. Detail the tools you used, the challenges you faced, and how you overcame them. This helps us understand your problem-solving skills and technical expertise.
Craft a Compelling Cover Letter: Your cover letter should reflect your passion for offensive security and your approach to uncovering vulnerabilities. Share why you're excited about joining our team at LSEG and how you can contribute to our mission.
Apply Through Our Website: We encourage you to apply directly through our website. Itβs the best way for us to receive your application and ensures youβre considered for the role. Plus, it shows youβre keen on joining our team!
How to prepare for a job interview at LSEG
β¨Know Your Tools Inside Out
Make sure you're well-versed in the tools mentioned in the job description, like Burp Suite and command-line utilities. Practise using them in real-world scenarios so you can confidently discuss your experience during the interview.
β¨Prepare for Technical Questions
Expect to dive deep into technical discussions about penetration testing methodologies and your past experiences. Brush up on your knowledge of application security, network protocols, and cloud environments to showcase your expertise.
β¨Showcase Your Communication Skills
Since you'll need to communicate findings to both technical and non-technical audiences, prepare to demonstrate how you can convey complex information clearly. Consider bringing examples of reports you've written or presentations you've delivered.
β¨Stay Updated on Emerging Threats
Research the latest trends in offensive security and be ready to discuss them. Showing that you're proactive about staying ahead of vulnerabilities will impress the interviewers and highlight your passion for the field.