Lead Ethical Hacking Penetration Tester

Driver and Vehicle Licensing Agency; Swansea; Hybrid; GBP 52,000 - 63,000; Full time

Benefits offered by this job

Learning and development

Flexible working

Inclusive culture

Employer pension contribution 28.97%

On-site gym

On-site nursery

Free parking

24-hour Employee Assistance Programme

Job summary

Driver and Vehicle Licensing Agency in Swansea is seeking an experienced cybersecurity professional to lead ethical hacking services and penetration testing. The role focuses on protecting critical digital services, delivering testing programmes, and guiding remediation strategies in complex enterprise environments.

You will influence security strategy, help develop talent and promote best practices across government, with hybrid working and a strong emphasis on risk-based decision making.

Qualifications

• Expert knowledge of penetration testing methodologies and tools.
• Strong understanding of vulnerability management and cyber security operations.
• Ability to diagnose security weaknesses and recommend practical solutions.

Responsibilities

• Lead penetration testing, ethical hacking and vulnerability management services.
• Design, deliver and oversee programmes of penetration testing and IT health checks across apps, infra and networks.
• Identify, analyse and prioritise vulnerabilities using a risk-based approach.
• Provide clear reporting and recommendations to support remediation and security improvement.

Skills

Penetration testing

Ethical hacking

Vulnerability management

Cyber security assurance

Security reporting

Tools

Penetration testing tools

Job description

Location: Swansea (Hybrid)

Salary: £57,515 - A Civil Service Pension with an employer contribution of 28.97%

Contract Type: Permanent – Flexible working, Full-time, Job share, Part-time

About the role

Join our Ethical Hacking Services team and play a pivotal role in protecting critical digital services. You'll provide expert cyber security assurance, lead penetration testing and vulnerability management activities, and help ensure our systems remain resilient against current and emerging threats. You'll also have the opportunity to influence security strategy, develop talent and contribute to cyber security best practice across government.

Key Responsibilities

• Lead and act as a subject matter expert for penetration testing, ethical hacking and vulnerability management services.
• Design, deliver and oversee programmes of penetration testing, vulnerability assessments and IT health checks across applications, infrastructure and networks.
• Identify, analyse and assess vulnerabilities, ensuring risks are prioritised using a risk-based approach.
• Provide clear reporting and recommendations to support remediation and security improvement activities.

Benefits

• Best in class learning and development tailored to your role
• An environment with flexible working options where we encourage a great work-life balance
• A culture encouraging inclusion and diversity with a range of staff communities to support all our colleagues
• Generous employer contribution of 28.9%, depending on chosen pension scheme
• Digital communities with clear career frameworks
• On-site gym plus personal training available (membership applies)
• On-site nursery, restaurants and coffee bar
• 25 days holiday (plus bank holidays), increasing by 1 each year (up to 30) & 8 Bank Holidays plus an additional Privilege Day to mark the King’s birthday
• 24-hour Employee Assistance Programme providing free confidential help and advice for staff
• Free parking

About you

• Leading penetration testing and ethical hacking activities within complex enterprise environments.
• Designing and delivering vulnerability management and security testing programmes.
• Assessing and communicating cyber security risks to both technical and non-technical audiences.
• Influencing senior stakeholders and driving remediation activity.
• Leading, coaching and developing teams.
• Working with security standards, frameworks and industry best practice.

Expert knowledge of penetration testing methodologies and tools. Strong understanding of vulnerability management and cyber security operations. Knowledge of threat intelligence, threat assessment and threat mitigation techniques. Strong understanding of security technologies, networks, infrastructure and application security. Ability to diagnose security weaknesses and recommend practical solutions. Understanding of legal, regulatory and compliance requirements relating to cyber security.