OT Cyber Security Analyst

Thames Water; Reading; On-site; GBP 65,000; Full time

Job summary

An established industry player is on the lookout for a highly skilled OT Senior Cyber Security Analyst to enhance their Security Operations team. This role is pivotal in maintaining SecOps solutions and leading the SOC team to effectively manage OT alerts and incidents. The ideal candidate will possess a deep understanding of SecOps concepts and best practices in both IT and OT environments, focusing on incident management and threat detection. With a commitment to continuous improvement and risk remediation, this position offers a unique opportunity to contribute to the security of critical infrastructure while enjoying a supportive and inclusive work culture.

Benefits

26 days holiday (up to 30)

Pension scheme

Health and wellbeing benefits

Qualifications

• Minimum 3 years in cyber security controls in enterprise or critical infrastructure.
• Experience with control systems like ICS, SCADA, CNI.

Responsibilities

• Contextualize OT specific threats and analyze network traffic.
• Maintain security operations and support tools to improve processes.
• Lead incident management and educate staff on procedures.

Skills

Cyber Security Controls

Incident Management

Threat Detection

Communication Skills

Collaboration Skills

Education

Relevant Degrees and Certifications

Tools

Microsoft Sentinel

SOAR

EDR/XDR

PAM

KQL

SIEM

ICS

SCADA

CNI

Job description

We are seeking a highly skilled and experienced OT Senior Cyber Security Analyst to join our Security Operations team at Thames Water, the UK’s largest water company. This role involves maintaining SecOps solutions, controls, and processes across the organization, and leading the SOC team to manage OT alerts and incidents effectively.

The ideal candidate will have a deep understanding of SecOps concepts, technologies, and best practices in both IT and OT environments, with a focus on incident management, threat detection, and security improvement. Strong communication and collaboration skills are essential.

Responsibilities:

1. Contextualise OT Specific Threats: Understand OT estate, threats, controls; analyze network traffic with tools like Claroty; liaise with Operations teams on risks.
2. Maintain Security Operations: Improve security processes; support tools like Microsoft Sentinel, SOAR, EDR/XDR, PAM; reduce alert noise and incident resolution times.
3. Proactive Risk Remediation: Identify and evaluate risks; perform threat hunting; demonstrate risk reduction metrics.
4. Incident Readiness & Response: Lead incident management; reduce impact and response times; educate staff on incident procedures.
5. Continuous Improvement: Drive automation and process enhancements; track KPIs and reporting for security metrics.

Key Relationships:

• CISO, Operational Technology Teams, IT Operations, Security Operations Manager, Security Architecture Manager, Cyber Security Programme Manager, Cyber Resilience Manager, Network Operations Manager, Business Change and Engagement, Key Business Stakeholders, Service Owners

Requirements:

• Minimum 3 years in cyber security controls in enterprise or critical infrastructure environments.
• Experience with control systems like ICS, SCADA, CNI.
• Experience in SOC environments, incident triage, and cyber risk remediation.
• Technical skills in OT infrastructure, networking, KQL, SIEM, MFA, PAM.

Preferred:

• Knowledge of network security tools; team leadership experience; relevant degrees and certifications like Microsoft SC-200, AZ-900, CCSP, OT-specific certifications.

Benefits:

• Salary up to £65,000, 26 days holiday (up to 30), pension scheme, health and wellbeing benefits.

About Thames Water:

The UK’s largest water and wastewater company, committed to building a sustainable future and supporting employees with career growth, flexible working, and inclusive culture.