To identify potential vulnerabilities within the banks IT systems using penetration testing tools and techniques.
Development and execution of assessments, audits, and threat models to identify vulnerabilities.
Collaboration with stakeholders and IT teams to identify emerging cyber-attack techniques, tools and technologies.
Development and maintenance of comprehensive documents and reports for senior stakeholders on penetration test findings.
Identification of emerging vulnerabilities, exploit codes and cyber-attacks to develop testing methodologies and assurance activities.

Holding a CREST qualification (or equivalent), or working towards one.
Delivering end‑to‑end penetration testing across web, network, and mobile environments.
Engaging with stakeholders, contributing to Statements of Work (SoW), and producing clear, actionable security reports.
Exposure to client or thick application testing and experience working to agreed project timelines.
An interest in emerging areas such as AI security testing, and familiarity with scripting or programming (no specific languages required).

participation in the penetration testing or wider security community (for example bug hunting, Hack The Box, CTFs, or hackathons)

Penetration Tester

Key skills