Penetration Tester, TVM & Security Assurance

Thames Water Utilities Limited; Reading; On-site; GBP 65,000 - 79,000; Full time

Benefits offered by this job

Salary up to £72,000

26 days annual leave

Generous pension

Performance-based pay

Employee benefits

Job summary

Thames Water is seeking a Security Penetration Tester to support the design, implementation and maintenance of TVM solutions across the IT estate. You will collaborate with Digital teams to mitigate vulnerabilities and ensure remediation is aligned with business needs.

You will conduct network and application testing, produce detailed reports for stakeholders, and help develop an internal penetration testing function.

Qualifications

• Strong knowledge of manual penetration testing techniques.
• Experience with operating systems and security testing tools.
• Experience in remediating cyber risks in complex environments.

Responsibilities

• Support the design and maintenance of TVM solutions across the organisation.
• Conduct network and application penetration testing, code and security reviews.
• Identify and exploit vulnerabilities through PoC testing.
• Support vulnerability management, ensuring a framework for identification, categorisation and mitigation exists.
• Develop and maintain penetration testing documentation, policies, and procedures.
• Integrate cyber security solutions with existing systems, applications, and infrastructure.
• Investigate newly identified cyber security vulnerabilities and provide mitigation actions.
• Coordinate with stakeholders on patching and vulnerability management issues.
• Maintain a cyber threat assessment methodology and align with industry standards.
• Support proactive threat hunting and dashboarding for threat and vulnerability metrics.

Skills

Penetration testing

Threat modelling

Vulnerability assessment

Tools

Tenable

Burp Suite

Kali Linux

Job description

Thames Water is seeking a Security Penetration Tester to support the design, implementation and maintenance of TVM solutions across the IT estate. You will collaborate with Digital teams to mitigate vulnerabilities and ensure remediation is aligned with business needs.

You will conduct network and application testing, produce detailed reports for stakeholders, and help develop an internal penetration testing function.