About this role
Salary: £44,000 - 76,000 per year
Requirements: Extensive experience leading penetration testing, application security testing or offensive security functions within a large and complex organisation.Demonstrable expertise in conducting and supervising complex application, API, cloud, infrastructure and network penetration testing engagements.Strong understanding of penetration testing methodologies, vulnerability discovery techniques, offensive security tooling and attacker tradecraft.Experience building, developing and leading high-performing technical teams.Excellent customer interaction skills, with the ability to communicate effectively with technical and non-technical audiences, including senior leadership.Strong understanding of modern enterprise technology environments, cloud platforms, operating systems, networks, software development practices and security controls.Passion for cyber security research, continuous learning and advancing security testing practices.Recognised offensive security certifications such as CREST, OSCP, OSCE, OSEP, GIAC, GWAPT, CPTS, CAPE or equivalent.Software development, automation or engineering experience in any low-level or high-level language (C#, C++, C, Python, Bash, Java, Rust, etc.).Experience within financial services or other highly regulated environments.Degree or postgraduate qualification in Cyber Security, Computer Science, or a related field, or equivalent experience.Familiarity with autonomous vulnerability discovery, AI-enabled security testing, frontier model evaluation, fuzzing frameworks and modern security engineering practices. Responsibilities: Draw on extensive hands-on penetration testing experience to shape testing strategy, guide the execution of complex application and infrastructure security assessments, and ensure the delivery of high-quality, risk-focused testing that helps strengthen our security posture.Lead, mentor and develop a high-performing team of penetration testers, encouraging a culture of technical excellence, continuous improvement, innovation and open communication.Define and carry out the Penetration Testing roadmap, ensuring alignment to CSO and wider Group security objectives while delivering a comprehensive security testing programme spanning threat resilience, regulatory, change-driven and continuous assurance testing.Drive the evolution of autonomous security testing through close collaboration with the Autonomous Vulnerability Research and Harness Engineering teams, helping embed automation, frontier model testing and scalable security validation capabilities across the testing lifecycle.Build positive relationships across the Chief Security Office and wider organisation.Communicate security risks, testing outcomes, and recommendations to technical practitioners and executives.Collaborate with teams to prioritise and remediate findings swiftly. Technologies: AIAPIBashC#CloudJavaNetworkPythonRustSecuritySupport More:
We are Lloyds Banking Group, and this is a pivotal moment to join our Chief Security Office as we transform how security is delivered across the Group. We are hiring a Penetration Testing Lead to provide strategic direction, operational delivery and technical excellence for our penetration testing capability. This is a hybrid role based in Manchester, Bristol, Edinburgh or London, with at least two days per week, or 40% of your time, in the office. We offer a wide-ranging benefits package including a generous pension contribution of up to 15%, an annual performance-related bonus, share schemes including free shares, adaptable benefits, 30 days holiday plus bank holidays, and a range of wellbeing initiatives and generous parental leave policies. We are investing in our people, data and tech, and we are committed to creating an inclusive workplace where everyone can thrive, learn and develop.
last updated 36 week of 2026