Junior Penetration Tester; Cyber Analyst), Threat & Vulnerability Management – Cyber Security D

Location

Leeds

Permanent

This is an opportunity to join the Bank of England’s Pentest Team as a Junior Penetration Tester and build your career in offensive security. You’ll gain hands‑on experience in penetration testing, vulnerability assessment, and support for red and purple team activity, working alongside experienced colleagues to help strengthen the Bank’s security across a wide range of systems and services. You will also have access to training to help with your technical and personal development goals.

• Flexible start and end time to each day
• Flexibility to adapt your calendar as needed, for example around the school run, the gym, or appointments
• A 50% in‑office attendance requirement, which can be spread across the month to support different working patterns
• Working from abroad policy (subject to approval and policy within the team)

We’re excited to be growing our presence in Leeds, a city we’ve been connected to for nearly 200 years! Our modern, accessible office in the City Centre offers a supportive, flexible working environment. The majority of roles, including this one, are now available in Leeds, giving you the chance to build a meaningful career outside of London while contributing to our mission from a dynamic and growing location.

You’ll work collaboratively with London‐based colleagues in a hybrid model, with regular opportunities to travel into the London office to meet and connect together in person.

Want to learn more? Discover what makes our Leeds office such a dynamic place to work by visiting the Leeds page for more details.

No two days in this role are exactly the same. You might start the day with a team catch‐up, then spend time supporting a penetration test, researching a new technique, or helping to review findings and draft clear reports. Along the way, you’ll work with experienced teammates who will support your development and help you build confidence across different technologies and testing approaches.

The role also offers flexibility in how you organise your day, with flexible start and finish times and hybrid working between the Leeds office and home.

You may already have some hands‑on penetration testing experience, or you may be looking to deepen your skills in areas such as infrastructure, cloud, or web application testing. If you enjoy problem‑solving, are keen to keep learning, and are excited by the opportunity to grow in a supportive team, we’d be keen to hear from you.

We recognise that strong candidates may not meet every requirement in exactly the same way. If you can demonstrate a solid foundation across the areas below and are ready to continue developing your skills, we’d still encourage you to apply.

• Hands‑on penetration testing experience, ideally around two years or more
• A recognised penetration testing certification, or clear progress towards one, such as OSCP, OSWA, GPEN, GWAPT, GCPN, CREST (CRT or CCT INF/APP), CSTM or CPTS
• Some practical experience in infrastructure, cloud, or web application pentesting
• Experience using standard offensive security tools
• A good understanding of common operating systems
• A basic understanding of networking concepts, including IP addressing, TCP/IP, and UDP
• An understanding of enterprise infrastructure technologies
• An understanding of cloud technologies
• Clear written and verbal communication skills, including the ability to contribute to technical reporting

The experience below would help you succeed in the role. If you bring some of these already and are keen to continue developing in others, we’d still encourage you to apply.

• Some experience or growing capability in cloud security pentesting
• Scripting skills, or a willingness to build them, in Python, Power Shell, or Bash
• Some exposure to Governance, Risk and Compliance processes, or an interest in learning how they support security work
• A high level of integrity, organisation, self‐motivation, and a genuine commitment to learning and continuous improvement

As part of the Cyber Division, you’ll…