Security Penetration Tester

<p class="text-muted mb-3">As a Security Penetration Tester,</p>

<p class="text-muted mb-3">you will be responsible for supporting the design, implementation, and maintenance of TVM (Threat & Vulnerability Management) solutions, controls and processes across the organisation.</p>

<p class="text-muted mb-3">You will be liaising with Digital teams to ensure appropriate mitigation and remediation of vulnerabilities detected across our IT estate.</p>

<p class="text-muted mb-3">This role requires an understanding of TVM concepts, technologies, and best practices, as well as the ability to collaborate effectively with cross-functional teams. The ideal candidate will possess strong communication and will be committed to ensuring the highest level of security, compliance, and user experience.</p>

<p class="text-muted mb-3">Security Clearance: CTC (Counter Terrorist Check) clearance is essential. You must currently hold or be able to attain CTC clearance for this role.</p>

<p class="text-muted mb-3">What you’ll be doing as a Security Penetration Tester</p>

<p class="text-muted mb-3">Help support and develop an internal penetration testing function.</p>

<p class="text-muted mb-3">Conduct network, application penetration testing, code and security reviews.</p>

<p class="text-muted mb-3">Identify and exploit vulnerabilities through proof-of-concept testing.</p>

<p class="text-muted mb-3">Support vulnerability management across the enterprise, ensuring that a framework for identification, categorisation and mitigation exists and is implemented and maintained.</p>

<p class="text-muted mb-3">Responsible for supporting the creation of the operating model for vulnerability management, that it is shared, agreed and operates effectively across the business.</p>

<p class="text-muted mb-3">Develop and maintain penetration testing documentation, policies, and procedures.</p>

<p class="text-muted mb-3">Integrate cyber security solutions (e.g. vulnerability scanning tools) with existing systems, applications, and infrastructure.</p>

<p class="text-muted mb-3">Evaluate and recommend technologies, tools, and vendors to meet business needs.</p>

<p class="text-muted mb-3">Investigate newly identified cyber security vulnerabilities and provide appropriate mitigation actions.</p>

<p class="text-muted mb-3">Liaise and coordinate with technology and business stakeholders in relation to cyber security patching and vulnerability management issues/actions.</p>

<p class="text-muted mb-3">Maintain a cyber threat assessment methodology, align to evolving industry standards and integrate into BAU and project-based business processes.</p>

<p class="text-muted mb-3">Support with proactive threat hunting for new and emerging cyber threats.</p>

<p class="text-muted mb-3">Develop and maintain dashboards with cyber security threat and vulnerability metrics.</p>

<p class="text-muted mb-3">Support compliance with relevant industry standards, regulations, and best practices, such as GDPR, NIS and ISO 27001.Base location – Hybrid – Clearwater Court Reading.</p>

<p class="text-muted mb-3">Working pattern – 36 hours Monday to Friday.</p>

<p class="text-muted mb-3">What you should bring to the role</p>

<p class="text-muted mb-3">Strong knowledge of manual penetration testing techniques and confident with operating systems and tools such as Tenable, Burp Suite, Kalli Linux.</p>

<p class="text-muted mb-3">Exposure to remediating vulnerabilities and patch management in a complex business environment.</p>

<p class="text-muted mb-3">Experience in remediating cyber risks in the ever-changing digital estate.</p>

<p class="text-muted mb-3">Experience in a penetration testing enterprise environment.</p>

<p class="text-muted mb-3">Prepare detailed reports and the ability to present findings to key stakeholders.</p>

<p class="text-muted mb-3">Cyber security industry certification(s) such as CSTM/ CRT/ OSCP/CTL.</p>

<p class="text-muted mb-3">Understanding of different patching management techniques and approaches for different technology stacks (e.g. SaaS, IaaS, End-User Computing, Server Estate, etc.).</p>

<p class="text-muted mb-3">Knowledge of TVM concepts, technologies, and best practices, including OSINT tools, vulnerability assessment, threat modelling, etc.What’s in it for you?</p>

<p class="text-muted mb-3">Competitive salary of up to £72,000 per annum depending on experience.</p>

<p class="text-muted mb-3">Annual Leave - 26 days holiday per year, increasing to 30 with the length of service. (plus bank holidays)</p>

<p class="text-muted mb-3">Generous Pension Scheme through AON.</p>

<p class="text-muted mb-3">Performance-related pay plan directly linked to company performance measures and targets.</p>

<p class="text-muted mb-3">Access to lots of benefits to help you take care of you and your family’s health and wellbeing, and your finances – from annual health MOTs and access to physiotherapy and counselling, to Cycle to Work schemes, shopping vouchers and life assurance.Find out more about our benefits and perks (Please note different T&Cs apply if on secondment)</p>

<p class="text-muted mb-3">Who are we?</p>

<p class="text-muted mb-3">We’re the UK’s largest water and wastewater company, with more than 16 million customers relying on us every day to supply water for their taps and toilets. We want to build a better future for all, helping our customers, communities, people, and the planet to thrive. It’s a big job and we’ve got a long way to go, so we need help from passionate and skilled people, committed to making a difference and getting us to where we want to be in the years and decades to come.</p>

<p class="text-muted mb-3">Learn more about our purpose and values</p>

<p class="text-muted mb-3">Working at Thames Water</p>

<p class="text-muted mb-3">Thames Water is a unique, rewarding, and diverse place to work, where every day you can make a difference, yet no day is the same. As part of our family, you’ll enjoy meaningful career opportunities, flexible working arrangements and excellent benefits.</p>

<p class="text-muted mb-3">If you’re looking for a sustainable and successful career where you can make a daily difference to millions of people’s lives while helping to protect the world of water for future generations, we’ll be here to support you every step of the way. Together, we can build a better future for our customers, our region, and our planet.</p>

<p class="text-muted mb-3">Real purpose, real support, real opportunities. Come and join the Thames Water family. Why choose us? Learn more.</p>

<p class="text-muted mb-3">We’re committed to being a great, diverse, and inclusive place to work. We welcome applications from everyone and want to ensure you feel supported throughout the recruitment process. If you need any adjustments, whether that’s extra time, accessible formats, or anything else just let us know, we’re here to help and support.</p>

<p class="text-muted mb-3">When a crisis happens, we all rally around to support our customers. As part of Team Thames, you’ll have the opportunity to sign up to support our customers on the frontline as an ambassador. Full training will be given for what is undoubtedly an incredibly rewarding experience. It’s also a great opportunity to learn more about our business and meet colleagues.</p>

<p class="text-muted mb-3">Disclaimer: Due to the high volume of applications we receive, we may close the advert earlier than the advertised date, so we encourage you to apply as soon as possible to avoid disappointment</p>