Senior Penetration Tester

1 day ago

London, Greater London, United Kingdom JPMorgan Chase Full time £60,000 - £120,000 per year

As an Assessments & Exercises Vice President (Senior Penetration Tester) in the Penetration Testing team, you will contribute significantly to enhancing the firm's cybersecurity or resiliency posture by using industry-standard assessment methodologies and techniques to proactively identify risks and vulnerabilities in people, processes, and technology. As part of the team, your primary responsibility will be performing hands on penetration testing of some of JPMC's most critical applications, platforms, and the perimeter. You will work with application developers to not only understand root cause and mitigate vulnerabilities, but also to identify where vulnerabilities can be identified earlier in the SDLC.

Successful candidates are expected to demonstrate an eagerness to learn, the drive to excel, excellent technical knowledge of security concepts and proven expertise in penetration testing.

Job responsibilities

  • Design and execute testing and simulations – such as penetration tests and contribute to the development and refinement of assessment methodologies, tools, and frameworks to ensure alignment with the firm's strategy and compliance with regulatory requirements
  • Evaluate controls for effectiveness and impact on operational risk, as well as opportunities to automate control evaluation
  • Collaborate closely with cross-functional teams to develop comprehensive assessment reports – including detailed findings, risk assessments, and remediation recommendations – making data-driven decisions that encourage continuous improvement
  • Utilize threat intelligence and security research to stay informed about emerging threats, vulnerabilities, industry best practices, and regulations. Apply this knowledge to enhance the firm's assessment strategy and risk management. Engage with peers and industry groups that share threat intelligence analytics

Required qualifications, capabilities, and skills

  • 5+ years of experience in conducting manual penetration tests against a wide variety of applications and technologies including web, mobile, thick clients, internal and external facing infrastructures and cloud
  • Knowledge of cybersecurity organization practices, operations, risk management processes, principles, architectural requirements, engineering and threats and vulnerabilities, including incident response methodologies
  • Ability to identify systemic security or resiliency issues as they relate to threats, vulnerabilities, or risks, with a focus on recommendations for enhancements or remediation, and proficiency in multiple security assessment methodologies (e.g., Open Worldwide Application Security Project (OWASP) Top Ten, National Institute of Standards and Technology (NIST) Cybersecurity Framework), offensive testing tools, or resiliency testing equivalents
  • Excellent communication, collaboration, and report writing skills, with the ability to influence and engage stakeholders across various functions and levels

Preferred qualifications, capabilities, and skills

  • Experience in testing Public cloud environments like AWS, Azure and GCP with proficiency in at least one platform
  • Experience in reverse engineering standalone, thick client and mobile applications
  • Proficiency in security concepts for both Windows and Unix-like Operating Systems
  • Experience in source code review and/or building software with multiple programming languages (i.e. Python, Java, Rust, etc.)
  • Certifications like CREST (CRT, CCT), OSCP, OSCE, GXPN, GRE

  • Penetration Tester

    3 days ago

    London, Greater London, United Kingdom 2-sec consulting Full time £45,000 - £75,000 per year

    Job Advert2-sec is growing fast – and we're looking for top-tier penetration testers to join our dynamic team. If you're passionate about cybersecurity and want to be part of a company that values expertise, innovation, and career growth, this is your opportunity.We're not just offering a job - we're offering a future. The right candidate will have the...

  • Lead Penetration Tester

    1 week ago

    London, Greater London, United Kingdom 0ebd341e-b214-428f-b278-d55548574c2d Full time £55,000 - £70,000 per year

    We are looking to hire two Lead Penetration Testers with CTL Certification.This is a chance to join a well-established cybersecurity team that supports organisations across both public and private sectors. You'll play a key role in delivering high-quality penetration testing that helps clients stay secure in a fast-moving threat landscape.Role...

  • Senior Penetration Tester

    4 days ago

    London, Greater London, United Kingdom JPMorganChase Full time £80,000 - £120,000 per year

    DescriptionAs an Assessments & Exercises Vice President (Senior Penetration Tester) in the Penetration Testing team, you will contribute significantly to enhancing the firm's cybersecurity or resiliency posture by using industry-standard assessment methodologies and techniques to proactively identify risks and vulnerabilities in people, processes, and...

  • Penetration Tester

    1 hour ago

    London, Greater London, United Kingdom Spait Infotech Private Limited Full time £38,000 - £100,000 per year

    Job Description: Penetration Tester (Remote – UK)Experience: 0–12 YearsJob Type: Full-Time, PermanentLocation: Remote (UK Only)Right to Work: Must have eligibility to work in the UK. No sponsorship provided.Key ResponsibilitiesPerform penetration tests on web applications, networks, and systems to identify security vulnerabilities.Conduct security...

  • SC or NATO Cleared Penetration Tester

    2 weeks ago

    London, Greater London, United Kingdom iO Associates Full time £24,000 - £96,000 per year

    SC or NATO Cleared Pen Testers needed 100% Remote - OUTSIDE IR35 ContractiO Associates are currently looking forx3 SC or NATO Cleared Penetration Testersto join a12 month contract(OUTSIDE IR35)with alikely 12 month extensionstarting in January.The client is offeringup to £400 a day (Outside IR35).This role is 100% remote, you can work from the UK or a NATO...

  • Consultant Penetration Tester

    5 days ago

    London, Greater London, United Kingdom NTT DATA UK Full time £60,000 - £120,000 per year

    The team you'll be working with: Penetration Tester Consultant  - CRT registeredRole Overview:We are seeking a highly skilled and experienced Penetration Tester Consultant - CREST registered with a strong focus understanding on threat intelligence and attack methods.  The ideal candidate will be responsible for managing and conducting advanced penetration...

  • Penetration Tester

    1 week ago

    London, Greater London, United Kingdom Starling Full time £100,000 - £120,000 per year

    Starling is the UK's first and leading digital bank on a mission to fix banking We built a new kind of bank because we knew technology had the power to help people save, spend and manage their money in a new and transformative way. Read more about Our Story here.We're a fully licensed UK bank with the culture and spirit of a fast-moving, disruptive tech...

  • Senior Penetration Tester

    4 days ago

    London, Greater London, United Kingdom G-Research Full time £60,000 - £100,000 per year

    Do you want to tackle the biggest questions in finance with near infinite compute power at your fingertips?G-Research is a leading quantitative research and technology firm, with offices in London and Dallas. We are proud to employ some of the best people in their field and to nurture their talent in a dynamic, flexible and highly stimulating culture where...

  • Senior Offensive Security Tester

    4 days ago

    London, Greater London, United Kingdom CovertSwarm Full time £60,000 - £120,000 per year

    The MissionAt CovertSwarm, we're redefining offensive security through constant, relentless attack. As a Senior Hive Member, you'll lead sophisticated operations that push beyond traditional boundaries, mentoring fellow operators while discovering new attack vectors that others miss.The OpportunityThis isn't just another testing role. You're an experienced...

  • Pen Tester Expert

    1 week ago

    London, Greater London, United Kingdom Smartedge Solutions Full time £60,000 - £90,000 per year

    Must : (Active Security Clearance)Pen Testing experience more than 3 years.security management consultancy including IT Health Checks (ITHC), risk assessmentspenetration testing tools including (Burpsuite, Metasploit, Nmap) etcconfigure network devices, firewalls, IDS/IPS devices and wireless technologiesregulatory compliance such as GDPR, ISO27001 and PCI...