Cyber Threat & Vulnerability Analyst

Thames Water Utilities Limited; Reading; Hybrid; GBP 39,000 - 65,000; Full time

Benefits offered by this job

Competitive salary

Annual leave 26-30 days

Performance pay

Pension scheme

Health & wellbeing benefits

Job summary

Thames Water Utilities Limited is recruiting a Cyber Threat & Vulnerability Analyst to protect critical water services. You’ll identify, assess, and reduce cyber risk across a large technology estate, prioritising remediation and guiding technical teams.

The role blends hands-on vulnerability management with collaboration across technical and business units. Based in Reading with hybrid working, you’ll support threat assessments, develop dashboards, and align with standards such as GDPR, PCI

Qualifications

• Experience supporting vulnerability management, patching, or cyber risk reduction in a complex environment.
• Understanding of cyber security concepts, including vulnerability management and threat assessment approaches.
• Ability to work with technical teams to support remediation of security issues.
• Experience with security tooling such as vulnerability scanners or similar technologies.
• Ability to communicate technical issues clearly to both technical and non-technical audiences.
• Awareness of how security risks are managed across different technology environments (cloud, servers, end-user devices, operational systems).
• Relevant cyber security qualification or industry certification such as CISSP, CISM, or CCSP.

Responsibilities

• Support end-to-end vulnerability management across IT and OT environments.
• Help shape and improve threat and vulnerability management processes, frameworks, and ways of working.
• Work with technical and business teams to prioritise and remediate vulnerabilities based on risk.
• Investigate new vulnerabilities and recommend clear, practical mitigation actions.
• Support integration of vulnerability scanning tools into existing systems and processes.
• Build and maintain dashboards that show cyber risk, trends, and remediation progress.
• Contribute to threat assessments and support proactive threat hunting activities.
• Help ensure alignment with GDPR, PCI DSS, NIS, and ISO 27001.

Skills

Vulnerability mgmt

Cyber risk reduction

Threat assessment

Security tooling

Cross-functional work

Communication skills

Security standards

Education

CISSP

CISM

CCSP

Tools

Vulnerability scanners

SIEM

Threat modeling

Job description

We're looking for a Cyber Threat & Vulnerability Analyst to join our Cyber Security team, helping protect the systems that deliver essential water services to millions of customers every day. You'll play a key role in identifying, assessing, and reducing cyber risk across a large and complex technology estate, making sure vulnerabilities are understood, prioritised, and fixed before they can be exploited.

It's a hands-on role where you'll work closely with technical teams and business stakeholders to keep our services safe, resilient, and running smoothly.

What you'll be doing as a Cyber Threat & Vulnerability Analyst:

As a Cyber Threat & Vulnerability Analyst, you'll be responsible for supporting and improving how we identify, assess, and manage cyber vulnerabilities across the organisation. You'll help shape how we reduce cyber risk and strengthen our overall security posture.

• Support end-to-end vulnerability management across IT and operational technology environments
• Help shape and improve threat and vulnerability management processes, frameworks, and ways of working
• Work with technical and business teams to prioritise and remediate vulnerabilities based on risk
• Investigate new vulnerabilities and recommend clear, practical mitigation actions
• Support integration of vulnerability scanning tools into existing systems and processes
• Build and maintain dashboards that show cyber risk, trends, and remediation progress in a clear way
• Contribute to threat assessments and support proactive threat hunting activities
• Help ensure alignment with standards such as General Data Protection Regulation, Payment Card Industry Data Security Standard, Network and Information Systems Regulations, and International Organisation for Standardisation 27001
• Monitor vulnerability management tools and processes, identifying ways to improve effectiveness and reduce risk

Base location: Reading - Clearwater Court

Working pattern or hours: 36 hours Monday to Friday, hybrid working

Necessary requirements for the role: Must be eligible to obtain Counter Terrorist Check security clearance

Required skills and experience:

• Experience supporting vulnerability management, patching, or cyber risk reduction in a complex environment
• Understanding of cyber security concepts, including vulnerability management and threat assessment approaches
• Ability to work with technical teams to support remediation of security issues
• Experience or understanding of security tooling such as vulnerability scanners or similar technologies
• Ability to communicate technical issues clearly to both technical and non-technical audiences
• Awareness of how security risks are managed across different technology environments (for example cloud, servers, end-user devices, or operational systems)
• A relevant cyber security qualification or industry certification such as Certified Information Systems Security Professional, Certified Information Security Manager, or Certified Cloud Security Professional

Extra qualities that would be a great fit for our team:

• Experience working with large enterprise or critical infrastructure environments
• Familiarity with threat intelligence or threat modelling approaches
• Experience supporting or improving security processes and governance
• Exposure to operational technology or legacy infrastructure environments
• Additional cyber security certifications such as Certified Threat Intelligence Analyst, Certified Vulnerability Assessor, Offensive Security Certified Professional, or similar

We're the UK's largest water and wastewater company, with more than 16 million customers relying on us every day to supply water for their taps and toilets. We want to build a better future for all, helping our customers, communities, people, and the planet to thrive. It's a big job and we've got a long way to go, so we need help from passionate and skilled people, committed to making a difference and getting us to where we want to be in the years and decades to come.

Learn more about our purpose and values

Working at Thames Water

Thames Water is a unique, rewarding, and diverse place to work, where every day you can make a difference, yet no day is the same. As part of our family, you'll enjoy meaningful career opportunities, flexible working arrangements and excellent benefits.

If you're looking for a sustainable and successful career where you can make a daily difference to millions of people's lives while helping to protect the world of water for future generations, we'll be here to support you every step of the way. Together, we can build a better future for our customers, our region, and our planet.

Real purpose, real support, real opportunities. Come and join the Thames Water family. Why choose us? Learn more.

We're committed to being a great, diverse, and inclusive place to work. We welcome applications from everyone and want to ensure you feel supported throughout the recruitment process. If you need any adjustments, whether that's extra time, accessible formats, or anything else just let us know, we're here to help and support.

When a crisis happens, we all rally around to support our customers. As part of Team Thames, you'll have the opportunity to sign up to support our customers on the frontline as an ambassador. Full training will be given for what is undoubtedly an incredibly rewarding experience. It's also a great opportunity to learn more about our business and meet colleagues.

Benefits

• Competitive salary up to £65,000 per annum depending on experience
• Annual Leave - 26 days holiday per year increasing to 30 with the length of service (plus bank holidays)
• Performance-related pay plan directly linked to company performance measures and targets
• Generous Pension Scheme through AON
• Access to lots of benefits to help you take care of you and your family's health and wellbeing, and your finances - from annual health MOTs and access to physiotherapy and counselling, to Cycle to Work schemes, shopping vouchers and life assurance