Senior Security Specialist - Penetration Testing

About the role

LSEG is looking for a Senior Penetration Tester to join its internal offensive security team. The role is hands-on and technical, covering the planning and execution of penetration tests across a wide range of systems and applications. It suits a skilled offensive security professional who enjoys finding vulnerabilities and improving security posture through rigorous testing.

Key responsibilities

• Conduct in-depth penetration tests on applications, infrastructure and cloud environments
• Own each pentesting engagement end to end, with limited oversight
• Write technical scoping documents and track assessment metadata, including engagement details, team members, tools, schedule, targets, constraints, exclusions and limitations
• Document findings clearly and concisely, with actionable remediation guidance
• Work with application teams to scope, run and report on security assessments
• Improve testing methodologies, tooling and automation, and contribute to R&D initiatives
• Keep up with emerging threats and techniques, share knowledge and mentor colleagues
• Build custom tools, scripts and exploits to support testing

Required profile

• Proven hands-on experience testing web applications, APIs, thick clients and common infrastructures (Active Directory, cloud and cloud-native environments)
• Experience automating pentesting tasks and in large, complex enterprise environments
• Track record of managing and delivering security engagements for different organisations
• Clear technical writing and the ability to explain risks to technical and non-technical stakeholders
• Fluent written and spoken English
• Certifications and engagement with the security community are a plus; threat modelling experience is a plus

Required skills

• Burp Suite and common command-line tools, with custom scripting
• Cloud platforms (AWS, Azure, GCP) and containerised environments (Docker, Kubernetes)
• Application security, network protocols and operating systems