Principal Penetration Tester - Hybrid, Pension

DWP; Lancashire; Hybride; GBP 85 000 - 103 000; Plein temps

Avantages offerts par ce poste

Hybrid working

Flexible hours

Pension contributions 28.97%

Résumé du poste

DWP Digital is seeking a Principal Penetration Tester to lead security testing across one of the UK's largest digital environments, challenging defences and helping make services secure by design.

As a technical leader, you will shape engagements, decide testing scope, and use advanced exploitation techniques while mentoring other testers. Hybrid working and diverse hubs support work-life balance at DWP Digital.

Qualifications

• Demonstrated experience conducting structured penetration tests using established frameworks (two of OWASP, NIST CSF, PTES).
• Experience planning, executing and documenting security assessments with minimal supervision.
• Understanding of NIST SP 800-115 for technical testing.
• Proven ability to configure and interpret results from security assessment tools.
• Experience identifying and documenting security vulnerabilities and communicating risk to diverse stakeholders.
• Experience with security standards and compliance frameworks (ISO 27001, PCI DSS, SOC 2, NIST CSF).
• Experience in client-facing roles with clear, actionable security reporting.
• Ability to build trusted relationships with senior stakeholders and influence actions.

Responsabilités

• Lead security testing across a large, complex digital environment and shape each engagement.
• Decide what to test and how to test, using advanced exploitation and network-evasion techniques.
• Mentor and guide other penetration testers and share expertise with teams.
• Communicate complex security issues clearly to technical and non-technical stakeholders.

Connaissances

Structured penetration tests

Planning security assessments

NIST SP 800-115 understanding

Security testing tools

Vulnerability analysis & risk

Security standards & frameworks

Client-facing reporting

Stakeholder influence

Outils

OWASP

NIST Cybersecurity Framework

PTES

ISO 27001

PCI DSS

Description du poste

DWP Digital is seeking a Principal Penetration Tester to lead security testing across one of the UK's largest digital environments, challenging defences and helping make services secure by design.

As a technical leader, you will shape engagements, decide testing scope, and use advanced exploitation techniques while mentoring other testers. Hybrid working and diverse hubs support work-life balance at DWP Digital.