Security Penetration Tester

Salary: £72,000 - 72,000 per year

Requirements:

• Strong knowledge of manual penetration testing techniques and confidence with operating systems and tools such as Tenable, Burp Suite, and Kalli Linux.
• Exposure to remediating vulnerabilities and patch management in a complex business environment.
• Experience in remediating cyber risks in a constantly changing digital estate.
• Experience in a penetration testing enterprise environment.
• Ability to prepare detailed reports and present findings to key stakeholders.
• Cyber security industry certifications such as CSTM, CRT, OSCP, or CTL.
• Understanding of patch management techniques and approaches for different technology stacks, such as SaaS, IaaS, End-User Computing, and Server Estate.
• Knowledge of TVM concepts, technologies, and best practices, including OSINT tools, vulnerability assessment, and threat modelling.
• We require current CTC clearance or the ability to attain CTC clearance for this role.

Responsibilities:

• Help support and develop an internal penetration testing function.
• Conduct network, application penetration testing, code reviews, and security reviews.
• Identify and exploit vulnerabilities through proof-of-concept testing.
• Support vulnerability management across the enterprise, ensuring a framework for identification, categorisation, mitigation, implementation, and maintenance exists.
• Support the creation of the operating model for vulnerability management so it is shared, agreed, and effective across the business.
• Develop and maintain penetration testing documentation, policies, and procedures.
• Integrate cyber security solutions, such as vulnerability scanning tools, with existing systems, applications, and infrastructure.
• Evaluate and recommend technologies, tools, and vendors to meet business needs.
• Investigate newly identified cyber security vulnerabilities and provide appropriate mitigation actions.
• Liaise and coordinate with technology and business stakeholders on cyber security patching and vulnerability management issues and actions.
• Maintain a cyber threat assessment methodology, align it to evolving industry standards, and integrate it into BAU and project-based business processes.
• Support proactive threat hunting for new and emerging cyber threats.
• Develop and maintain dashboards with cyber security threat and vulnerability metrics.
• Support compliance with relevant industry standards, regulations, and best practices, such as GDPR, NIS, and ISO 27001.

Technologies:

• IaaS
• Support
• Linux
• Network
• Security

More:

We are the UKs largest water and wastewater company, with more than 16 million customers relying on us every day to supply water for their taps and toilets. We want to build a better future for all, helping our customers, communities, people, and the planet thrive. This Security Penetration Tester role is based hybrid at Clearwater Court, Reading, with a working pattern of 36 hours Monday to Friday. We offer a competitive salary of up to £72,000 per annum depending on experience, 26 days holiday increasing to 30 with length of service plus bank holidays, a generous pension scheme through AON, performance-related pay, and a wide range of health, wellbeing, and financial benefits including health MOTs, physiotherapy, counselling, Cycle to Work schemes, shopping vouchers, and life assurance. We are committed to being a diverse and inclusive place to work and support flexible working, meaningful career opportunities, and the chance to make a real difference for our customers, communities, and the environment.

last updated 37 week of 2026