Principal Penetration Tester - Hybrid Leader

DWP Digital; Sheffield; Hybrid; GBP 85,000 - 103,000; Full time

Benefits offered by this job

Hybrid working

Flexible hours

Civil service pension contributions 28

Job summary

DWP Digital is seeking a Principal Penetration Tester to lead security testing across a large, complex UK digital environment. You will shape engagements, test methodologies and exploitation techniques while guiding junior colleagues and collaborating with delivery teams.

You will report findings clearly to technical and non-technical stakeholders, influence senior leaders and help embed security by design across services. Hybrid working and flexible hours are offered.

Qualifications

• Demonstrable experience conducting structured penetration tests using recognised frameworks (OWASP, NIST CSF, PTES).
• Experience planning, executing and documenting security assessments with minimal supervision.
• Understanding of NIST SP 800-115 for technical security testing.
• Proven experience with configuring and interpreting results from security assessment tools.
• Evidenced experience identifying and documenting vulnerabilities and communicating risk.
• Experience with ISO 27001, PCI DSS, SOC 2 and NIST CSF compliance frameworks.
• Ability to present findings to technical and non-technical stakeholders.
• Proven ability to influence senior stakeholders and secure agreed actions.

Responsibilities

• You'll lead penetration testing across a large, complex digital environment, testing defences and identifying weaknesses.
• You'll shape each engagement, deciding what and how to test with advanced exploitation and network-evasion techniques.
• As a technical leader, you'll mentor other testers and share expertise with teams and senior stakeholders.
• You'll integrate security into service design and development, not just testing at the end.

Skills

Penetration testing

Frameworks (OWASP/NIST/PTES)

Vulnerability assessment

Risk communication

Client-facing reporting

Security standards (ISO 27001/PCI DSS)

Stakeholder influence

NIST SP 800-115 knowledge

Tools

Security testing tools

Job description

DWP Digital is seeking a Principal Penetration Tester to lead security testing across a large, complex UK digital environment. You will shape engagements, test methodologies and exploitation techniques while guiding junior colleagues and collaborating with delivery teams.

You will report findings clearly to technical and non-technical stakeholders, influence senior leaders and help embed security by design across services. Hybrid working and flexible hours are offered.