Cyber Threat & Vulnerability Analyst

Thames Water; Reading; Hybrid; GBP 52,000 - 65,000; Full time

Benefits offered by this job

Salary up to £65k

Annual leave 26–30 days

Pension scheme

Wellbeing benefits

Job summary

Thames Water is seeking a Cyber Threat & Vulnerability Analyst to join our Cyber Security team, protecting the systems that deliver essential water services to millions of customers. You’ll identify, assess, and reduce cyber risk by understanding vulnerabilities and driving fixes before exploitation.

This hands-on role collaborates with technical teams and business stakeholders to strengthen security posture, monitor risk, and deliver clear dashboards and actionable mitigation steps.

Qualifications

• Experience supporting vulnerability management and patching in complex environments.
• Understanding of vulnerability management and threat assessment concepts.
• Ability to work with technical teams to remediate security issues.
• Experience with vulnerability scanners or similar tools.
• Ability to explain security issues to technical and non-technical audiences.
• Awareness of security governance across cloud, servers, and OT/IT.

Responsibilities

• Support end-to-end vulnerability management across IT and operational technology environments.
• Help shape and improve threat and vulnerability management processes, frameworks, and ways of working.
• Work with technical and business teams to prioritise and remediate vulnerabilities based on risk.
• Investigate new vulnerabilities and recommend clear, practical mitigation actions.
• Support integration of vulnerability scanning tools into existing systems and processes.
• Build and maintain dashboards that show cyber risk, trends, and remediation progress in a clear way.
• Contribute to threat assessments and support proactive threat hunting activities.
• Help ensure alignment with standards such as GDPR, PCI DSS, NIS, and ISO 27001.
• Monitor vulnerability management tools and processes, identifying ways to improve effectiveness and reduce risk.

Skills

Vulnerability management

Threat assessment

Security tooling

Communication skills

IT/OT awareness

Education

Cyber security certification (e.g., CISSP/CISM/CCSP)

Job description

We’re looking for a Cyber Threat & Vulnerability Analyst to join our Cyber Security team, helping protect the systems that deliver essential water services to millions of customers every day. You’ll play a key role in identifying, assessing, and reducing cyber risk across a large and complex technology estate, making sure vulnerabilities are understood, prioritised, and fixed before they can be exploited.

It’s a hands-on role where you’ll work closely with technical teams and business stakeholders to keep our services safe, resilient, and running smoothly.

What you’ll be doing as a Cyber Threat & Vulnerability Analyst:

As a Cyber Threat & Vulnerability Analyst, you’ll be responsible for supporting and improving how we identify, assess, and manage cyber vulnerabilities across the organisation. You’ll help shape how we reduce cyber risk and strengthen our overall security posture.

• Support end-to-end vulnerability management across IT and operational technology environments
• Help shape and improve threat and vulnerability management processes, frameworks, and ways of working
• Work with technical and business teams to prioritise and remediate vulnerabilities based on risk
• Investigate new vulnerabilities and recommend clear, practical mitigation actions
• Support integration of vulnerability scanning tools into existing systems and processes
• Build and maintain dashboards that show cyber risk, trends, and remediation progress in a clear way
• Contribute to threat assessments and support proactive threat hunting activities
• Help ensure alignment with standards such as General Data Protection Regulation, Payment Card Industry Data Security Standard, Network and Information Systems Regulations, and International Organisation for Standardisation 27001
• Monitor vulnerability management tools and processes, identifying ways to improve effectiveness and reduce risk

Base location:

Reading – Clearwater Court

Working pattern or hours:

36 hours Monday to Friday, hybrid working

Necessary requirements for the role: Must be eligible to obtain Counter Terrorist Check security clearance

What you should bring to the role

The must-haves (essential criteria) for this opportunity include:

• Experience supporting vulnerability management, patching, or cyber risk reduction in a complex environment
• Understanding of cyber security concepts, including vulnerability management and threat assessment approaches
• Ability to work with technical teams to support remediation of security issues
• Experience or understanding of security tooling such as vulnerability scanners or similar technologies
• Ability to communicate technical issues clearly to both technical and non-technical audiences
• Awareness of how security risks are managed across different technology environments (for example cloud, servers, end-user devices, or operational systems)
• A relevant cyber security qualification or industry certification such as Certified Information Systems Security Professional, Certified Information Security Manager, or Certified Cloud Security Professional

Extra qualities that would be a great fit for our team:

• Experience working with large enterprise or critical infrastructure environments
• Familiarity with threat intelligence or threat modelling approaches
• Experience supporting or improving security processes and governance
• Exposure to operational technology or legacy infrastructure environments
• Additional cyber security certifications such as Certified Threat Intelligence Analyst, Certified Vulnerability Assessor, Offensive Security Certified Professional, or similar

What’s in it for you?

• Competitive salary up to £65,000 per annum depending on experience
• Annual Leave - 26 days holiday per year increasing to 30 with the length of service (plus bank holidays)
• Performance-related pay plan directly linked to company performance measures and targets
• Generous Pension Scheme through AON
• Access to lots of benefits to help you take care of you and your family’s health and wellbeing, and your finances – from annual health MOTs and access to physiotherapy and counselling, to Cycle to Work schemes, shopping vouchers and life assurance.

Find out more about our benefits and perks (Please note different T&Cs apply if on secondment)

Who are we?

We’re the UK’s largest water and wastewater company, with more than 16 million customers relying on us every day to supply water for their taps and toilets. We want to build a better future for all, helping our customers, communities, people, and the planet to thrive. It’s a big job and we’ve got a long way to go, so we need help from passionate and skilled people, committed to making a difference and getting us to where we want to be in the years and decades to come.

Learn more about our purpose and values

Working at Thames Water

Thames Water is a unique, rewarding, and diverse place to work, where every day you can make a difference, yet no day is the same. As part of our family, you’ll enjoy meaningful career opportunities, flexible working arrangements and excellent benefits.

If you’re looking for a sustainable and successful career where you can make a daily difference to millions of people’s lives while helping to protect the world of water for future generations, we’ll be here to support you every step of the way. Together, we can build a better future for our customers, our region, and our planet.

Real purpose, real support, real opportunities. Come and join the Thames Water family. Why choose us? Learn more.

We’re committed to being a great, diverse, and inclusive place to work. We welcome applications from everyone and want to ensure you feel supported throughout the recruitment process. If you need any adjustments, whether that’s extra time, accessible formats, or anything else just let us know, we’re here to help and support.

When a crisis happens, we all rally around to support our customers. As part of Team Thames, you’ll have the opportunity to sign up to support our customers on the frontline as an ambassador. Full training will be given for what is undoubtedly an incredibly rewarding experience. It’s also a great opportunity to learn more about our business and meet colleagues.

Disclaimer: due to the high volume of applications we receive, we may close the advert earlier than the advertised date, so we encourage you to apply as soon as possible to avoid disappointment.