Associate Ethical Hacker – Penetration Tester (£40,590)

486150 Associate Ethical Hacker – Penetration Tester (£40,590)

Driver and Vehicle Licensing Agency

Apply before 11:55 pm on Sunday 15th November 2026

📍 Location: Swansea (This role is suitable for hybrid working)

💷 Salary: £40,590

The salary of £40,590 includes the base salary £37,090 and a non-pensionable Recruitment and Retention Allowance of £3,500.
Plus a Civil Service Pension with an employer contribution of 28.97%

🕘️ Contract Type: Permanent – Flexible working, Full-time, Job share, Part-time

🏆️ Available Positions: 1

Join our Ethical Hacking Services team and play a pivotal role in protecting critical digital services. You’ll provide penetration testing and vulnerability management activities and help ensure our systems remain resilient against current and emerging threats.

This is a hands-on role, carrying out penetration testing activities on applications and infrastructure and helping to support of our IT Services (ITS) strategy.

The Driver and Vehicle Licensing Agency (DVLA) has an extensive change program, and you will engage in a rolling program of security testing covering multiple IT domains and environments, you’ll also be testing new software and infrastructure projects to ensure that DVLA remains responsive and adaptable to the changing threat environment, business requirements and Central Government policies.

Top Responsibilities

Working within the Ethical Hacking Services Team as a skilled Ethical Hacker / Penetration Tester, in support of ITS strategy and wider Government strategy.
Assisting in the execution of a Penetration Testing Program of systems and applications, against known vulnerabilities highlighting weakness ensuring coverage of the whole IT estate and multiple environments.
Assist in Vulnerability Management activities including triage of vulnerabilities by relevance and criticality to the organisation, identifying mitigations and advise on implementation.

For more information on the role and responsibilities please see the full job advert on CS Jobs using the link provided.

Benefits

Best in class learning and development tailored to your role
An environment with flexible working options where we encourage a great work-life balance
A culture encouraging inclusion and diversity with a range of staff communities to support all our colleagues
Generous employer contribution of 28.9%, depending on chosen pension scheme
Flexible working options where we encourage a great work-life balance.
Digital communities with clear career frameworks
On-site gym plus personal training available (membership applies)
On-site nursery, restaurants and coffee bar
25 days holiday (plus bank holidays), increasing by 1 each year (up to 30) & 8 Bank Holidays plus an additional Privilege Day to mark the King’s birthday.
24-hour Employee Assistance Programme providing free confidential help and advice for staff.
Free parking

About You

We are looking for a real self-starter. You will bring excellent organisational skills and an ability to prioritise a busy workload and confidently respond to changing priorities. You take a positive approach to solving problems, and the ability to work on your own initiative and under pressure.

You will come to us with experience of the following:

Demonstratable experience of Vulnerability Management in a large-scale Enterprise organisation

Demonstratable experience of Penetration Testing in a large-scale Enterprise organisation

Extensive knowledge of Cyber Security

Qualifications

Applicants must currently hold the Agored Cymru Level 3 Diploma in Cyber Security Analyst, or a recognised equivalent qualification, at the point of application. This qualification is an essential requirement for the role and candidates who do not already possess this qualification (or an equivalent) will not meet the minimum eligibility criteria.

In addition, candidates should either hold, or be willing to work towards achieving the following industry-recognised qualifications:

Certificate of Information Security Management Principles
PCIRM (Practitioner’s Certificate in Information Risk Management)
CISSP (Certified Information Systems Security Professional)
CEH (Certified Ethical Hacker) or equivalent
CRT (CREST Registered Penetration Tester) or equivalent
Forensic qualification, such as CFIP (Certified Forensic Investigation Practitioner)

How to Apply

👉 Read the full description and apply here: https://bit.ly/4ip6k2B

This vacancy closes at 23:55 on Sunday 15^th November 2026