Lead Penetration Tester: Security Strategy & Mentorship

DWP Digital; Leeds; Hybrid; GBP 85,000 - 103,000; Full time

Benefits offered by this job

Flexible working hours

Time off volunteering and charitable给

Bring your authentic self - I Can BeMe

Discounts and savings on shopping and

Interest-free loans for bike or season

Job summary

DWP Digital in the United Kingdom is recruiting a Principal Penetration Tester to lead security testing across a large, complex digital environment, shaping engagements, deciding what to test, and employing advanced exploitation techniques to test our defences.

You will act as a technical leader, guiding other testers, mentoring the team, and collaborating with stakeholders to embed security into how we design and build services from the outset. Hybrid working options apply across multiple hubs.

Qualifications

• Experience conducting structured penetration tests following established frameworks (OWASP, NIST CSF, PTES).
• Planning, executing and documenting security assessments with minimal supervision.
• Understanding of NIST SP 800-115 for technical security testing.
• Experience with commercial and open-source security testing tools and interpreting results.
• Ability to identify vulnerabilities and communicate risk to technical and non-technical stakeholders.

Responsibilities

• Lead penetration testing engagements across a large, complex digital environment, shaping scope and testing methods.
• Mentor and guide other penetration testers and collaborate with teams and senior stakeholders to embed security by design.

Skills

Structured penetration testing

Test planning & documentation

NIST SP 800-115

Security testing tools

Vulnerability analysis & risk comms

Security frameworks & standards

Client-facing reporting

Stakeholder influencing

Job description

DWP Digital in the United Kingdom is recruiting a Principal Penetration Tester to lead security testing across a large, complex digital environment, shaping engagements, deciding what to test, and employing advanced exploitation techniques to test our defences.

You will act as a technical leader, guiding other testers, mentoring the team, and collaborating with stakeholders to embed security into how we design and build services from the outset. Hybrid working options apply across multiple hubs.