Cyber Security Analyst
The advert says the job needs UK security clearance:
“Must hold, or be eligible to obtain and maintain, UK Security Check (SC) Clearance.”
SC clearance usually needs five years of living in the UK, and DV clearance usually needs ten. If you have lived here that long, for example on a Student and then a Graduate visa, you may be able to get it. Most people applying from outside the UK cannot, so the highest likelihood we give this job is Unlikely. Ask PENNON GROUP PLC whether they would sponsor you.
Unlikely
Sponsorship likelihood
The advert asks for security clearance
£48,500
Going rate
Skilled Worker going rate
This role may qualify only on a lower rate
Anyone can use the standard rate, and the pay is below it. If you are a new entrant or a PhD holder, you can use a lower rate, and the pay clears the new entrant rate. On the jobs board, Standard hides roles like this and the new entrant rate shows them as Possible at most.
New graduate or PhD holder? Pick one of the lower rates.
What each route needs for this job
| Occupation code | New entrant 70% of going rate | STEM PhD 80% of going rate | Relevant PhD 90% of going rate | Standard rate 100% of going rate |
|---|---|---|---|---|
2135 Cyber security professionals Most likely code | £34,000 Clears | £38,800 Clears | £43,700 Clears | £48,500 Misses |
We use the lowest threshold across the plausible codes. Likelihood is Possible at most when the pay clears only a lower rate, or only under a less likely code. A mark is for the top of the advertised pay. How the Home Office picks the code
About the role
Powered by Water, Driven by Purpose
South West Water keeps the South West flowing with safe, reliable drinking water and wastewater services across some of the UK’s most stunning landscapes.
We’re proud to be part of Pennon Group, a leader in the UK water sector, working towards a greener future. Our goals? As well as lowering our carbon footprint, we’re working with partners to plant 300,000 trees, restore peatlands and supporting farmers and landowners to improve water quality and wildlife.
Whether you’re starting out or seeking a new challenge, our scale and ambition create opportunities for you to shape your own career.
Ready to make a splash? Join our team today.
Security Design & Engineering Analyst
Location: Exeter, Devon (Hybrid Working)
Salary: £35,000 - £45000 + excellent benefits
Are you an experienced cyber security professional with a passion for designing, implementing and improving security technologies? We're looking for a Security Design & Engineering Analyst to help strengthen and evolve our cyber security capabilities across both IT and Operational Technology (OT) environments.
This is an exciting opportunity to work on a wide range of security technologies, supporting the delivery of security controls, integrations and tooling that protect critical business services and infrastructure. You'll play a key role in translating security requirements into practical technical solutions, ensuring our security capabilities remain effective, proportionate and aligned with industry best practice.
What you'll be doingConfigure, implement, integrate and support a range of cyber security technologies through to business-as-usual operation.
Act as a technical subject matter expert for designated security platforms and controls, driving continual improvement and optimisation.
Produce technical designs, configuration standards, implementation plans and support documentation.
Translate security requirements into operational controls, configurations and procedures.
Validate security monitoring, logging, alerting, access controls, system hardening and vulnerability visibility.
Support proof-of-concept activities, product evaluations, technical testing and implementation projects.
Develop operational runbooks, technical standards, build documentation and support procedures.
Investigate and resolve tooling, integration, reporting and data-quality issues.
Support vulnerability management activities, including tooling administration, remediation tracking and exception management.
Produce technical assessments, control reviews, gap analyses, management information and audit evidence.
Support security requirements within Operational Technology (OT) environments, including monitoring, segmentation, remote access and resilience initiatives.
Work collaboratively with infrastructure, cloud, networking, identity, operational, project and governance teams to deliver secure solutions.
Experience within Security Engineering, Cyber Security Operations, Technical Security or Infrastructure Security environments.
Hands-on experience implementing, configuring and supporting security technologies and controls.
Experience supporting security projects through design, configuration, testing, documentation and operational transition.
Ability to translate security requirements into practical technical solutions.
Experience managing or supporting vulnerability management tooling, remediation tracking and reporting.
Experience conducting technical control reviews, security assessments and producing stakeholder reporting.
Strong troubleshooting and problem-solving skills across security tooling and integrations.
Experience using scripting or automation technologies such as PowerShell or Python.
Ability to produce high-quality technical documentation and operational procedures.
Strong stakeholder engagement skills and the ability to work across multiple technical teams.
Security engineering principles and best practices.
Knowledge of NCSC Cyber Assessment Framework (CAF), NIS Regulations, ISO 27001 and NIST frameworks.
Understanding of identity and access management, network security, endpoint security, logging and monitoring, vulnerability management, cloud security and secure configuration.
Must hold, or be eligible to obtain and maintain, UK Security Check (SC) Clearance.
Experience within utilities, critical national infrastructure, water, energy or other highly regulated sectors.
Awareness of Operational Technology (OT) and Industrial Control Systems (ICS).
Knowledge of OT security concepts including network segmentation, remote access, monitoring, resilience and vulnerability visibility.
Relevant industry certifications such as CISSP, CCSP, GIAC, Microsoft Security certifications or equivalent vendor certifications.
If you're passionate about cyber security engineering and enjoy designing, implementing and improving technical security controls that protect critical services, we'd love to hear from you.
Come and help us build secure, resilient and future-ready technology environments while developing your career within a collaborative and forward-thinking team.
We believe in rewarding our people for their hard work and dedication. As our
Security Design & Engineering Analyst you'll enjoy:
What we offer
Attractive Salary & Benefits Package
Annual Bonus Scheme – Recognising company performance
Pension Scheme – Helping you plan for your future
Hybrid Working – A blend of office and home working, supporting flexibility while maintaining collaboration with your team
Employee Assistance Programme – Supporting your wellbeing
Employee Discounts – Access to discounts on a range of products and services
Annual Leave Allowance – Giving you time to rest and recharge
Annual Leave Buy & Sell Scheme – Flexibility to purchase additional holiday or sell unused leave to suit your lifestyle
Career Development Opportunities – Supporting your ongoing growth and development
Closing Date: 30th October 2026
We may close this vacancy early if we receive a high volume of applications. We encourage you to apply as soon as possible.
Please note that the successful candidate will be subject to a mandatory DBS check as part of the onboarding process.
Be yourself, we like it that way. Together, we will build a culture of belonging, where inclusion is instinctive. Diversity is our strength and a reflection of our communities. We care, we value everyone, we celebrate uniqueness.
Our core values, which are essential to our success, are:
Be Rock Solid - Build trust and be trusted. Be the one we all look to and can depend on.
Be You - We want you to bring your best everyday. Be yourself and make your mark in your individual way.
Be the Future - Embrace change. Drive Progress. Own the challenge.
This description is the source posting as it read when we added it. We are not affiliated with PENNON GROUP PLC, so check their own site for the current details.
Where this offer sits in the market
Cyber security professionals (SOC 2135) · UK · ONS ASHE 2025 · basic pay · ~30k in sample- Middle half £43,680–69,316
- Median £51,376
- Going rate £48,500
- Threshold £41,700
- New entrant £34,000–43,700
Similar sponsored roles
See all UK visa jobsAbout sponsorship for this role
Does this job guarantee visa sponsorship?
Not necessarily. PENNON GROUP PLC holds a sponsor licence, but sponsorship for a specific hire is always the employer's decision. Be upfront in your application that you'll require it.
What salary is needed for this role to be eligible?
The offer must clear both the general threshold and the SOC 2135 going rate of £48,500. New-entrant and shortage discounts can lower it.