The Cabinet Office supports the Prime Minister and ensures the effective running of government. It is also the corporate headquarters for government, in partnership with HM Treasury, and takes the lead in certain critical policy areas.
We are the Cabinet Office’s cyber security team, and our mission is to secure the department against cyber threats. We protect our nationwide internal IT infrastructure, and high-profile citizen-facing digital services such as GOV.UK.
Security Vetting Requirements
This role requires SC (Security Check) which will be conducted by NSV (National Security vetting). You need to have been resident in the UK within the past five years in order to apply. Here is a short video why this is required.
https://www.youtube.com/embed/lRit8RA7Zpo?si=CTOlUU2qHk9vbAvX
The Ethical Hacking team and our strategic delivery partner deliver penetration testing services to the Cabinet Office, and are responsible for testing the security of the department’s IT and digital services by simulating a range of threat actors using offensive tools and techniques. This enables the department to identify and drive cyber-security improvements.
As the Penetration Test Manager, you will be a pivotal figure in managing the team, the customer engagements, relationship building and planning/scoping for both the Ethical Hacking Team and our Strategic Delivery Partner which provides third-party penetration testing. You will collaborate with internal stakeholders to ensure meaningful penetration tests that discover risks and deliver maximum value.
As the Penetration Team Manager, you will:
* Coordinate delivery of penetration testing services across the Cabinet Office, including through the internal team and commercial partners
* Coordinate the triage and remediation of identified vulnerabilities, working closely with service teams and developers
* Work closely with other teams across Cyber Security and the wider Cabinet Office to proactively reduce cyber security vulnerabilities
* Produce regular reporting which delivers insights on penetration testing team activities and the impact on cyber security risk
* Own penetration testing team tooling, responsible for procurement, vendor management, configuration, and integration
* Support the wider Cyber Defence team in understanding, detecting and responding to security threats across the Cabinet Office
* Act as an escalation point for, and provide coaching and mentoring to, security analysts
* Be responsible for leadership and line management of security analysts
Cyber incidents can and do arise on a 24/7 basis. The team operates an out-of-hours on call rota, which you will be expected to join.
#J-18808-Ljbffr