Cyber Security Tester

\u003cfigure data-alignment=\"center\" class=\"relative\" style=\"width:fit-content;margin-left:auto;margin-right:auto;\"\u003e\u003cimg src=\"https://images.teamtailor-cdn.com/images/s3/teamtailor-production/gallery_picture-v6/image_uploads/2a338298-490f-491c-badc-5bb6014b6a5d/original.png\" alt=\"RS4252_SWW_Stack 2lines_colour.png\" title=\"\" width=\"179\" height=\"124\" data-alignment=\"center\" style=\"width:179px;max-width:179px;height:124px;\"\u003e\u003c/figure\u003e\u003cp\u003e\u003cstrong\u003ePowered by Water, Driven by Purpose\u003c/strong\u003e\u003c/p\u003e\u003cp\u003eSouth West Water keeps the South West flowing with safe, reliable drinking water and wastewater services across some of the UK's most stunning landscapes.\u003c/p\u003e\u003cp\u003eWe're proud to be part of Pennon Group, a leader in the UK water sector, working towards a greener future. Our goals? As well as lowering our carbon footprint, we're working with partners to plant 300,000 trees, restore peatlands and supporting farmers and landowners to improve water quality and wildlife.\u003c/p\u003e\u003cp\u003eWhether you're starting out or seeking a new challenge, our scale and ambition create opportunities for you to shape your own career.\u003c/p\u003e\u003cp\u003eReady to make a splash? \u003cstrong\u003eJoin our team today.\u003c/strong\u003e\u003c/p\u003e\u003chr\u003e\u003ch4\u003eCyber Security Tester (known internally as \u003cstrong\u003eSecurity Testing \u0026amp; Assurance Specialist)\u003c/strong\u003e\u003c/h4\u003e\u003cp\u003e\u003cstrong\u003eLocation:\u003c/strong\u003e Exeter / Hybrid Working\u003cbr\u003e\u003cstrong\u003eSalary:\u003c/strong\u003e Up to £45,000 depending on experience \u0026amp; excellent benefits package\u003cbr\u003e\u003cstrong\u003eSecurity Clearance:\u003c/strong\u003e Must hold, or be eligible to obtain and maintain, UK Security Check (SC) clearance\u003c/p\u003e\u003ch6\u003eHelp protect critical services that millions rely on every day\u003c/h6\u003e\u003cp\u003eWe're looking for a \u003cstrong\u003eSecurity Testing \u0026amp; Assurance Specialist\u003c/strong\u003e to join our Cyber Security team and play a key role in strengthening the resilience of our technology estate.

This is an exciting opportunity for an experienced cyber security professional who enjoys combining hands-on technical testing with strategic assurance activities across enterprise IT and operational technology environments.\u003c/p\u003e\u003cp\u003eYou'll work across a diverse range of technologies, helping to identify vulnerabilities, validate security controls and ensure our systems, people and processes are prepared to defend against evolving cyber threats.\u003c/p\u003e\u003ch6\u003eWhat you'll be doing\u003c/h6\u003e\u003cp\u003eAs a Security Testing \u0026amp; Assurance Specialist, you'll be responsible for planning, coordinating and delivering a broad range of security testing and assurance activities, including:\u003c/p\u003e\u003cul\u003e\u003cli\u003e\u003cp\u003eDefining risk-based security testing strategies and assurance plans for projects, programmes and operational services.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eReviewing solutions, architectures and technical designs to identify security weaknesses and testing requirements.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eConducting application, web, API, infrastructure, cloud, network and identity security assessments.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eIdentifying vulnerabilities, attack paths and security risks, recommending remediation actions and validating closure.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003ePlanning and delivering adversary simulations, red team-style assessments, purple team exercises and blue team validation activities.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eTesting monitoring, logging, detection and incident response capabilities against recognised threat behaviours.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eDesigning and facilitating tabletop exercises, crisis management simulations, cyber recovery exercises and executive cyber scenarios.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eProducing high-quality technical and executive-level reports, documenting findings, risks and recommendations.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eTracking remediation activities and supporting risk treatment through to completion.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eMaintaining testing standards, procedures, metrics, dashboards and evidence required for audits and regulatory assurance.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eCollaborating with OT specialists to safely deliver assurance activities across operational technology environments.\u003c/p\u003e\u003c/li\u003e\u003c/ul\u003e\u003ch6\u003eWhat we're looking for\u003c/h6\u003e\u003cp\u003eWe're interested in candidates with demonstrable experience across several of the following areas:\u003c/p\u003e\u003cul\u003e\u003cli\u003e\u003cp\u003eSecurity testing, penetration testing, security assurance, red teaming, security operations or a related cyber security discipline.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eApplication, web, API, cloud, infrastructure or network security assessments.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eIdentifying and communicating technical vulnerabilities, attack paths and control weaknesses.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eProducing technical and executive-facing security reports and recommendations.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eWorking with project teams, architects and technical stakeholders to validate security controls and remediation activities.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003ePlanning, facilitating or participating in cyber security exercises and simulations.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eSupporting threat emulation, adversary simulation, detection validation or purple team activities.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eUsing scripting and automation tools such as PowerShell, Python or Bash.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eEngaging confidently with both technical and non-technical stakeholders.\u003c/p\u003e\u003c/li\u003e\u003c/ul\u003e\u003ch6\u003eEssential knowledge and skills\u003c/h6\u003e\u003cul\u003e\u003cli\u003e\u003cp\u003eStrong understanding of application security testing and common vulnerabilities.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eKnowledge of infrastructure, cloud, network and identity security concepts.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eFamiliarity with:\u003c/p\u003e\u003cul\u003e\u003cli\u003e\u003cp\u003eOWASP Testing Guide\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eOWASP Top 10\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eMITRE ATT\u0026amp;CK Framework\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eNCSC Cyber Security Guidance\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eNIST Cybersecurity Framework\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eCyber Kill Chain\u003c/p\u003e\u003c/li\u003e\u003c/ul\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eAbility to analyse complex risks and communicate findings clearly.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eEligible to obtain and maintain UK SC Clearance.\u003c/p\u003e\u003c/li\u003e\u003c/ul\u003e\u003ch6\u003eDesirable experience \u0026amp; certifications\u003c/h6\u003e\u003cul\u003e\u003cli\u003e\u003cp\u003eExperience within utilities, water, energy, critical national infrastructure or other regulated sectors.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eOT / ICS security awareness and experience supporting regulatory assurance frameworks.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eKnowledge of NIS Regulations, CAF and ISO27001.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eProfessional certifications such as:\u003c/p\u003e\u003cul\u003e\u003cli\u003e\u003cp\u003eCREST CRT, CCT or CCSAS\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eOSCP\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eCISSP\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eGIAC\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eSecurity+\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eMicrosoft or Azure Security Certifications\u003c/p\u003e\u003c/li\u003e\u003c/ul\u003e\u003c/li\u003e\u003c/ul\u003e\u003ch6\u003eOur Benefits\u003c/h6\u003e\u003cp\u003eWe believe in rewarding our people for their hard work and dedication. As our \u003cbr\u003e\u003cspan\u003e\u003cstrong\u003eSecurity Testing and Assurance Specialist\u003c/strong\u003e \u003c/span\u003eyou'll enjoy:\u003c/p\u003e\u003cp\u003e\u003cstrong\u003eWhat we offer\u003c/strong\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003e\u003cp\u003e\u003cstrong\u003eAttractive Salary \u0026amp;

Benefits

Package\u003c/strong\u003e\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u003cstrong\u003eAnnual Bonus Scheme\u003c/strong\u003e - Recognising company performance\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u003cstrong\u003ePension Scheme\u003c/strong\u003e - Helping you plan for your future\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u003cstrong\u003eHybrid Working\u003c/strong\u003e - A blend of office and home working, supporting flexibility while maintaining collaboration with your team\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u003cstrong\u003eEmployee Assistance Programme\u003c/strong\u003e - Supporting your wellbeing\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u003cstrong\u003eEmployee Discounts\u003c/strong\u003e - Access to discounts on a range of products and services\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u003cstrong\u003eAnnual Leave Allowance\u003c/strong\u003e - Giving you time to rest and recharge\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u003cstrong\u003eAnnual Leave Buy \u0026amp; Sell Scheme\u003c/strong\u003e - Flexibility to purchase additional holiday or sell unused leave to suit your lifestyle\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u003cstrong\u003eCareer Development Opportunities\u003c/strong\u003e - Supporting your ongoing growth and development\u003c/p\u003e\u003c/li\u003e\u003c/ul\u003e\u003chr\u003e\u003cp\u003e\u003cstrong\u003eClosing Date: 30th October 2026\u003c/strong\u003e\u003c/p\u003e\u003cp\u003eWe may close this vacancy early if we receive a high volume of applications. We encourage you to apply as soon as possible.\u003c/p\u003e\u003cp\u003e\u003cem\u003ePlease note that the successful candidate will be subject to a mandatory DBS check as part of the onboarding process.\u003c/em\u003e\u003c/p\u003e\u003cp\u003e\u003cstrong\u003eBe yourself, we like it that way.\u003c/strong\u003e Together, we will build a culture of belonging, where inclusion is instinctive. Diversity is our strength and a reflection of our communities.

We care, we value everyone, we celebrate uniqueness.\u003c/p\u003e\u003cp\u003e\u003cstrong\u003eOur core values, which are essential to our success, are:\u003c/strong\u003e\u003c/p\u003e\u003cp\u003e\u003cstrong\u003eBe Rock Solid\u003c/strong\u003e - Build trust and be trusted. Be the one we all look to and can depend on.\u003c/p\u003e\u003cp\u003e\u003cstrong\u003eBe You \u003c/strong\u003e- We want you to bring your best everyday. Be yourself and make your mark in your individual way.\u003c/p\u003e\u003cp\u003e\u003cstrong\u003eBe the Future\u003c/strong\u003e - Embrace change.

Drive Progress. Own the challenge.\u003c/p\u003e\u003cfigure data-alignment=\"left\" class=\"relative\" style=\"width:fit-content;margin-left:0px;margin-right:auto;\"\u003e\u003cimg src=\"https://images.teamtailor-cdn.com/images/s3/teamtailor-production/gallery_picture-v6/image_uploads/434969f8-20ae-43a9-aaf2-971d8656de5e/original.png\" alt=\"Values\" title=\"\" width=\"467\" height=\"117\" data-alignment=\"left\" style=\"width:467px;max-width:467px;height:117px;\"\u003e\u003c/figure\u003e\u003cp\u003e\u003c/p\u003e TPBN1_UKTJ