Penetration Tester Job at Barclays (Whippany)

Job Description

Embark on a transformative journey as a Penetration Tester - AVP. At Barclays, our vision is clear –to redefine the future of banking and help craft innovative solutions. Penetration Testing team provide a core cyber assurance service. Services are provided via a global internal team and preferred suppliers. We provide Security Assurance capabilities which are aligned to the 'lifecycle' of a service or application. In this role, you will play a critical role in the delivery of security assurance across annual lifecycle testing and change/project engagements. This will be across a range of different technologies (e.g. web application, API, infrastructure, virtualization/containers, mobile, cloud, AI). In addition to BAU pen testing, there will be close collaboration with teams such as vulnerability management, application security, and CTEM to ensure proactive security.

Job Responsibility

Development and execution of assessments, audits, and threat models to identify vulnerabilities within the banks systems, applications and servers using penetration tools and techniques, and communicate key findings and recommendations to stakeholders
Collaboration with stakeholders and IT teams to identify emerging cyber-attack techniques, tools and technologies and to support the development of penetration testing methodologies
Development and maintenance of comprehensive documents and reports for senior stakeholders on penetration test findings, and remediation guidance
Collaboration with stakeholders to understand their security requirements and controls in business processes, application/services, to enhance overall security posture and assurance
Identification of emerging vulnerabilities, exploit codes and cyber-attacks to develop testing methodologies and assurance activities

Requirements

Practical experience for delivery experience in penetration testing or related fields
Proficiency in Penetration testing in following technical domains, Web based Applications, Network/Infrastructure, APIs, Mobile Apps, Thick clients, MCPs/AI Agents/LLMs, Cloud environments
Understanding of the security mechanisms associated with Applications, Operating Systems, Networks, Databases, Virtualization, Cloud technologies, AI
Familiarity with cloud-native environments, container security, and infrastructure-as-code
Excellent communication and collaboration skills

Nice to have

CREST/OSCP/SANS or equivalent pen testing certifications
Red/Purple team experience
Considerable understanding of attack paths and adversary emulation
Enterprise vulnerability management experience (vulnerability research, scanning, operational process)
Wider SDL activities such as threat/attack modelling and design review
Familiarity and experience with key industry frameworks such as OWASP, MITRE ATT&CK/CTID, CISA Secure-by-Design, NIST CSF 2.0/CRI Profile, DORA/FFIEC

What we offer

medical, dental and vision coverage
401(k)
life insurance
other paid leave for qualifying circumstances
incentive award
competitive holiday allowance
private medical care
pension contribution

Barclays - All Job Offers

Select Country

Penetration Tester

Job Description

Job Responsibility

Requirements

Nice to have

What we offer

Looking for more opportunities?