Associate Ethical Hacker – Penetration Tester (£40,590)
Summary
Hands-on junior penetration tester inside DVLA's Ethical Hacking Services team in Swansea, running a rolling program of security testing across applications, infrastructure and new projects, plus vulnerability triage and management to protect critical government digital services. Hybrid role (min 60% on-site) requiring a Level 3 Cyber Security Analyst diploma or equivalent.
- Job grade: Higher Executive Officer
- Contract type: Permanent
- Business area: DVLA - Information Technology Services
- Type of role: Digital, Information Technology, Security
- Working pattern: Flexible working, Full-time, Job share, Part-time
- Number of jobs available: 1
Location
About the job
Job summary
Do you have a passion for cyber security and a keen eye for identifying vulnerabilities?
Can you analyse data and problem-solve to help protect critical systems and data?
If so, we’d love to hear from you.
Join our Ethical Hacking Services team and play a pivotal role in protecting critical digital services. You'll provide penetration testing and vulnerability management activities, and help ensure our systems remain resilient against current and emerging threats.
Joining our department comes with many benefits, including:
- Employer pension contribution of 28.97% of your salary. Read more about Civil Service Pensions here
- 25 days annual leave, increasing by 1 day each year of service (up to a maximum of 30 days annual leave), plus 8 bank holidays a privilege day for the King’s birthday
- Flexible working options where we encourage a great work-life balance.
Read more in the Benefits section below!
Find out more about what it's like working at DVLA roles: Driver and Vehicle Licensing Agency - Department for Transport Careers
Job description
This is a hands-on role, carrying out penetration testing activities on applications and infrastructure and helping to support of our IT Services (ITS) strategy.
The Driver and Vehicle Licensing Agency (DVLA) has an extensive change program, and you will engage in a rolling program of security testing covering multiple IT domains and environments, you'll also be testing new software and infrastructure projects to ensure that DVLA remains responsive and adaptable to the changing threat environment, business requirements and Central Government policies.
You will have the opportunity to:-
- Apply and extend your knowledge of Ethical Hacking to cover a wide range of new technologies.
- Work as part of a team to deliver Penetration Testing services.
- Develop your own skills and broaden your experience.
- Be actively engaged in the major change program being implemented at DVLA.
- Develop and maintain relationships with a wide range of stakeholders.
This is a fast-paced and varied role. Our opportunity will offer you the challenge you are looking for, to build on your professional experience and development whilst working within DVLA premises without the need to travel to other locations.
Responsibilities
Responsibilities include, but are not limited to:
- Working within the Ethical Hacking Services Team as a skilled Ethical Hacker / Penetration Tester, in support of ITS strategy and wider Government strategy.
- Assisting in the execution of a Penetration Testing Program of systems and applications, against known vulnerabilities highlighting weakness ensuring coverage of the whole IT estate and multiple environments.
- Assist in Vulnerability Management activities including triage of vulnerabilities by relevance and criticality to the organisation, identifying mitigations and advise on implementation.
- Contributing to the definition of operational processes and dealing with customer related issues.
For further information on the role, please read the attached role profile.
Please note that the role profile is for information purposes only - whilst all elements are relevant to the role, they may not all be assessed during the recruitment process. This job advert will detail exactly what will be assessed during the recruitment process.
Person specification
We are looking for a real self-starter. You will bring excellent organisational skills and an ability to prioritise a busy workload and confidently respond to changing priorities. You take a positive approach to solving problems, and the ability to work on your own initiative and under pressure.
You will come to us with experience of the following:
- Demonstratable experience of Vulnerability Management in a large-scale Enterprise organisation
- Demonstratable experience of Penetration Testing in a large-scale Enterprise organisation
- Extensive knowledge of Cyber Security
Qualifications
Applicants must currently hold the Agored Cymru Level 3 Diploma in Cyber Security Analyst, or a recognised equivalent qualification, at the point of application. This qualification is an essential requirement for the role and candidates who do not already possess this qualification (or an equivalent) will not meet the minimum eligibility criteria.
In addition, candidates should either hold, or be willing to work towards achieving the following industry-recognised qualifications:
- Certificate of Information Security Management Principles
- PCIRM (Practitioner's Certificate in Information Risk Management)
- CISSP (Certified Information Systems Security Professional)
- CEH (Certified Ethical Hacker) or equivalent
- CRT (CREST Registered Penetration Tester) or equivalent
- Forensic qualification, such as CFIP (Certified Forensic Investigation Practitioner)
A commitment to continuous professional development is essential, and successful candidates who do not already hold these qualifications will be expected to work towards attaining them within an agreed timeframe to support the operational and strategic requirements of the role.
Working for the Digital Team
At DVLA, licensing is just the start. Every project you implement, touch and deliver has a ripple effect that’ll wash across the nation. Here the work you’re doing has the capacity to change the way 53 million people interact with our services. As we al be expected to work towards attaining them within an agreed timeframe to support the operational and strategic requirements of the role.im to keep our roads some of the safest in the world, our innovative, transformative digital-led services help optimise a nation of individuals and business every single day.
To see how our people are transforming our digital services, head over to our DVLA Digital Services Blog and, to understand more about the great opportunities and benefits of working at DVLA read our Inside DVLA blog.
Working hours, office attendance and travel requirements
Full time roles consist of 37 hours per week. Whilst we welcome applications from those looking to work with us on a part time basis, there is a business requirement for the successful candidate to be able to work at least 35 hours per week.
This role is suitable for hybrid working, which is a non-contractual arrangement where a combination of workplace and home-based working can be accommodated subject to business requirements.
The expectation at present is a minimum of 60% of your working time a month will be spent at either your designated workplace (the location cited in the advert) or, when required for business reasons, in another office/work location. There may be occasions where you are required to attend above the minimum expectation.
If you have a question about hybrid working, part time/job share hours, flexible working, travelling for work, or require a reasonable adjustment, please contact the Vacancy Holder during the recruitment process to avoid possible disappointment later in the process should your working arrangements not be compatible with the requirements of the role (see below for contact details).
Visa Sponsorship
Please take note that DVLA does not hold a UK Visa & Immigration (UKVI) Skilled Worker License sponsor and are unable to sponsor any individuals for Skilled Worker Sponsorship.
Security Check
Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check. To allow for meaningful checks to be carried out, candidates will be required to have at least 5 years continuous residency in the UK. All applicants for this role must ensure that they meet this minimum residency requirement - if you do not, your application will be withdrawn.
Qualifications
Behaviours
We'll assess you against these behaviours during the selection process:
- Making Effective Decisions
Technical skills
We'll assess you against these technical skills during the selection process:
- Penetration testing (practitioner)
- Legal and regulatory environment and compliance (awareness)
- Protective security (awareness)
Benefits
Passionate, reliable and always willing to push yourself and those around you, you’ll continue to seek improvement in your own role and challenge us too. Because we pride ourselves on how we approach your development. From training courses to specialist skills workshops and opportunities to grow your expertise, we thrive when you thrive. You can find out more about all of the above here alongside a full list of our benefits:
- Best in class learning and development tailored to your role
- An environment with flexible working options where we encourage a great work-life balance
- A culture encouraging inclusion and diversity with a range of staff communities to support all our colleagues
- Generous employer contribution of 28.9%, depending on chosen pension scheme
- Flexible working options where we encourage a great work-life balance.
- Digital communities with clear career frameworks
- On-site gym plus personal training available (membership applies)
- On-site nursery, restaurants and coffee bar
- 25 days holiday (plus bank holidays), increasing by 1 each year (up to 30) & 8 Bank Holidays plus an additional Privilege Day to mark the King’s birthday.
- 24-hour Employee Assistance Programme providing free confidential help and advice for staff.
- Free parking
Find out more about the benefits of working at DfT and its agencies (opens in a new window).
Things you need to know
Artificial intelligence
Selection process details
Our selection process ensures a comprehensive assessment of each applicant's qualifications, skills, and potential fit within our organisation.
The selection process for this role will be:
Stage 1: Sift of CV and personal statement
Stage 2: Interview
You must be successful at each stage to progress to the next stage.
Stage 1: Sift
At sift, you will be assessed against the following Success Profile elements:
Experience – you will be asked to provide a CV (unlimited wordcount) and personal statement (750-word count).
Please provide evidence of your Experience of the following:
- Extensive Vulnerability Management experience
- Extensive experience of penetration testing
- Strong analytical and problem-solving skills, with the ability to assess risk and prioritise issues
The sift will take place 16/11/26.
Should we receive a high volume of quality applications, we may invite a shortlist of the highest scoring candidates to interview. This means that some applications that meet the required standard could be placed ‘on hold’ after the sift and invited to interview if the vacant position(s) remain unfilled. You will be notified if your application is being put ‘on hold’ once the sift has been completed. Following interviews, any applicants remaining on hold will be notified by the panel of the next steps regarding their application.
Stage 2: Interview
Behaviours –
- Making Effective Decisions
Technical –
- Penetration testing (Practitioner)
- Legal and regulatory environment and compliance (Awareness)
- Protective security (Awareness)
The interviews will take place from 1/12/26.
Please note that we will try to meet the dates set out in the advert. There may be occasions when these dates will change.
This interview will be conducted in person at our Swansea office. Further details will be provided to you should you be selected for interview.
You can find out more about our hiring process, how to apply, and application and interview guidance on our careers site
Appointments for this position will be made in order of merit. If you are successful in the selection process but there are no further available posts for the advertised role, you may be contacted to discuss an offer for a lower graded role (with similar experience and responsibility requirements). If you are unsuccessful in the selection process, your application may be considered for a lower graded position if your demonstrated skills and experience meet the requirements of the alternative position. Candidates will be considered in order of merit.
Reasonable Adjustments
As a Disability Confident Leader employer, we are committed to ensuring that the recruitment process is fair, accessible and allows all candidates to perform at their best. If a person with a visible or non-visible disability is substantially disadvantaged, we have a duty to make reasonable changes to our processes.
Complete the “Assistance required” section in the “Additional requirements” page of your application form to tell us what changes or help you might need during the recruitment process. For instance, you may need wheelchair access at an interview, or if you’re deaf, a Language Service Professional.
If you need a reasonable adjustment so that you can complete your application, you should contact Government Recruitment Service via dftrecruitment.grs@cabinetoffice.gov.uk as soon as possible before the closing date to discuss your needs.
Document Accessibility
This job advert contains links to the DfT Careers website. Our website provides useful guidance and information that can support you during the application process. If you are experiencing accessibility problems with any attachments on this advert or the information on our website, please contact the email address in the 'Contact point for applicants' section.
Further Information
For more information about how we hire, and for useful tips on submitting your application for this role, visit the How We Hire page of our DfT Careers website. You can find detailed information about the recruitment process and what to expect when applying for a role.
Pre-employment Checking
If your application is successful but you have been dismissed from the Civil Service, your application could be removed at the pre-employment checking stage depending on the nature of the dismissal.
Applicants who are successful at interview will be, as part of pre-employment screening, subject to a check on the Internal Fraud Database (IFD). This check will provide information about employees who have been dismissed for fraud or dishonesty offences. This check also applies to employees who resign or otherwise leave before being dismissed for fraud or dishonesty had their employment continued. Any applicant’s details held on the IFD will be refused employment. A candidate is not eligible to apply for a role within the Civil Service if the application is made within a 5-year period following a dismissal for carrying out internal fraud against government.
All external applicants and current employees of accredited non-departmental public bodies (NDPBs) will be required to undergo a Social Media Check. A Social Media Check is a review of your publicly available online activity, typically across platforms like LinkedIn, Facebook, X (formerly Twitter), Instagram, and others. The purpose is to identify any public posts or content that could raise concerns for employers, such as:
- Hate speech or discriminatory behaviour
- Threats or acts of violence
- Illegal activity or substance misuse
- Sexually explicit material
- Extremist views or affiliations
Importantly, this check does not involve hacking into your accounts or accessing private messages. It only considers content you have chosen to make public. Employers use this kind of screening to help ensure their workplace remains safe, inclusive, and aligned with company values. It’s not about judging your personality or lifestyle - it’s about checking for potential red flags that might affect the role or company culture. If you have questions or concerns about the social media check, we would be happy to explain in more detail what’s being looked at and how your data is handled securely and fairly.
We will also hold a 12-month reserve list for this role, which may lead to potential opportunities beyond the role you applied for. You can read more about our reserve lists here.
For further information on National Security Vetting please visit the Demystifying Vetting website.
Feedback will only be provided if you attend an interview or assessment.
Security
See our vetting charter (opens in a new window).
Nationality requirements
This job is broadly open to the following groups:
- UK nationals
- nationals of the Republic of Ireland
- nationals of Commonwealth countries who have the right to work in the UK
- nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
- nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
- individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
- Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service
Working for the Civil Service
We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).
Diversity and Inclusion
Apply and further information
Contact point for applicants
Job contact :
- Name : Judith Jones
- Email : ITSRecruitment@dvla.gov.uk
Recruitment team
- Email : dftrecruitment.grs@cabinetoffice.gov.uk
Further information
If you are not satisfied with the response you receive from the Department, you can contact the Civil Service Commission: Visit the Civil Service Commission website Here
Attachments
| Job Profile Opens in new window (pdf, 265kB) |
| DVLA Digital Job Brochure - V1 2025 Opens in new window (pdf, 2074kB) |
Share this page
- Gmail