Lead Penetration Tester — Secure by Design

DWP Digital; Newcastle upon Tyne; Hybrid; GBP 78,000 - 94,000; Full time

Benefits offered by this job

Flexible working hours

Hybrid working

Pension plan

Career development

Job summary

DWP Digital is seeking a Principal Penetration Tester to lead security testing across a large, complex UK digital environment. You’ll shape engagements, decide what to test and how, using advanced exploitation to challenge defences while mentoring a team of testers.

Hybrid working in Blackpool, Leeds, Manchester, Newcastle or Sheffield with flexible hours and a strong focus on security by design. You’ll communicate findings clearly to technical and non-technical stakeholders and help drive

Qualifications

• Structured penetration tests following OWASP, NIST CSF or PTES.
• Plan, execute and document assessments with minimal supervision.
• Understanding of NIST SP 800-115 for testing.
• Configure and interpret results from security tools.
• Identify, analyze and document vulnerabilities; communicate risk to stakeholders.
• Familiarity with ISO 27001, PCI DSS, SOC 2, NIST CSF and risk mapping.
• Experience in client-facing reports and presenting findings.

Responsibilities

• Lead penetration testing across a large, complex environment.
• Shape each engagement: decide what and how to test; use advanced techniques.
• Mentor and support other testers; provide guidance.
• Collaborate with teams and senior stakeholders to embed security by design.

Skills

Penetration testing

Security assessment planning

NIST SP 800-115

Security testing tools

Vulnerability analysis

Regulatory standards

Stakeholder communication

Mentoring junior testers

Tools

Security testing suites

Job description

DWP Digital is seeking a Principal Penetration Tester to lead security testing across a large, complex UK digital environment. You’ll shape engagements, decide what to test and how, using advanced exploitation to challenge defences while mentoring a team of testers.

Hybrid working in Blackpool, Leeds, Manchester, Newcastle or Sheffield with flexible hours and a strong focus on security by design. You’ll communicate findings clearly to technical and non-technical stakeholders and help drive