Threat & Vulnerability Penetration Tester (TVM)

Thames Water; Reading; Hybrid; GBP 65,000 - 79,000; Full time

Benefits offered by this job

Generous Pension Scheme

Health & wellbeing benefits

Cycle to Work scheme

Life assurance

Job summary

Thames Water is seeking a Security Penetration Tester to support TVM solutions and vulnerability remediation across the IT estate. You will work with Digital teams to ensure mitigations are implemented and maintained, aiming for high security, compliance, and user experience.

The role requires CTC clearance or the ability to obtain it, and involves developing testing functions, conducting security reviews, and coordinating with stakeholders. Hybrid base in Reading with a 36-hour work pattern.

Qualifications

• Experience in manual penetration testing across networks and applications.
• Familiarity with industry-standard testing tools and methodologies.
• Ability to document findings clearly for non-technical stakeholders.
• CTC clearance or the ability to obtain it.

Responsibilities

• Support and develop an internal penetration testing function.
• Conduct network and application penetration testing and security reviews.
• Identify and exploit vulnerabilities with proof-of-concept testing.
• Support vulnerability management with identification, categorisation and mitigation.
• Develop and maintain penetration testing documentation, policies and procedures.
• Integrate cyber security solutions with existing systems, applications and infrastructure.
• Evaluate technologies, tools and vendors to meet business needs.
• Investigate identified cyber security vulnerabilities and provide mitigations.
• Coordinate with technology and business stakeholders on patching and vulnerability issues.
• Maintain a cyber threat assessment methodology aligned to industry standards.
• Support proactive threat hunting and threat intelligence dashboards.
• Contribute to GDPR, NIS and ISO 27001 compliance efforts.

Skills

Manual penetration testing

Tenable

Burp Suite

Kali Linux

Vulnerability management

Report writing

Job description

Thames Water is seeking a Security Penetration Tester to support TVM solutions and vulnerability remediation across the IT estate. You will work with Digital teams to ensure mitigations are implemented and maintained, aiming for high security, compliance, and user experience.

The role requires CTC clearance or the ability to obtain it, and involves developing testing functions, conducting security reviews, and coordinating with stakeholders. Hybrid base in Reading with a 36-hour work pattern.