Lead Ethical Hacking Penetration Tester

Location: Swansea (Hybrid)

Salary: £57,515 - A Civil Service Pension with an employer contribution of 28.97%

Contract Type: Permanent – Flexible working, Full-time, Job share, Part-time

About the role

Join our Ethical Hacking Services team and play a pivotal role in protecting critical digital services. You'll provide expert cyber security assurance, lead penetration testing and vulnerability management activities, and help ensure our systems remain resilient against current and emerging threats. You'll also have the opportunity to influence security strategy, develop talent and contribute to cyber security best practice across government.

Key Responsibilities

• Lead and act as a subject matter expert for penetration testing, ethical hacking and vulnerability management services.
• Design, deliver and oversee programmes of penetration testing, vulnerability assessments and IT health checks across applications, infrastructure and networks.
• Identify, analyse and assess vulnerabilities, ensuring risks are prioritised using a risk-based approach.
• Provide clear reporting and recommendations to support remediation and security improvement activities.

Benefits

• Best in class learning and development tailored to your role
• An environment with flexible working options where we encourage a great work-life balance
• A culture encouraging inclusion and diversity with a range of staff communities to support all our colleagues
• Generous employer contribution of 28.9%, depending on chosen pension scheme
• Digital communities with clear career frameworks
• On-site gym plus personal training available (membership applies)
• On-site nursery, restaurants and coffee bar
• 25 days holiday (plus bank holidays), increasing by 1 each year (up to 30) & 8 Bank Holidays plus an additional Privilege Day to mark the King’s birthday
• 24-hour Employee Assistance Programme providing free confidential help and advice for staff
• Free parking

About you

• Leading penetration testing and ethical hacking activities within complex enterprise environments.
• Designing and delivering vulnerability management and security testing programmes.
• Assessing and communicating cyber security risks to both technical and non-technical audiences.
• Influencing senior stakeholders and driving remediation activity.
• Leading, coaching and developing teams.
• Working with security standards, frameworks and industry best practice.

Expert knowledge of penetration testing methodologies and tools. Strong understanding of vulnerability management and cyber security operations. Knowledge of threat intelligence, threat assessment and threat mitigation techniques. Strong understanding of security technologies, networks, infrastructure and application security. Ability to diagnose security weaknesses and recommend practical solutions. Understanding of legal, regulatory and compliance requirements relating to cyber security.