Senior Cyber Security Analyst

Thames Water; Reading; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

Join a forward-thinking company as a Senior Cyber Security Analyst, where you will enhance digital defenses and respond to cyber threats. This role involves collaborating with technology and business stakeholders to improve security operations and incident management. You will investigate security alerts, optimize tools like Microsoft Sentinel, and engage with stakeholders to communicate cyber risks. With a focus on proactive threat hunting and compliance, this position offers a chance to make a significant impact in a dynamic environment. If you're passionate about cyber security and eager to contribute to a better future, this opportunity is for you.

Benefits

26 days annual leave

Generous Pension Scheme

Health and Wellbeing Benefits

Cycle to Work Scheme

Life Assurance

Qualifications

• Minimum of 3 years in a technical cyber security role.
• Experience with Security Operations Centre (SOC).
• Ability to write and tune KQL queries.

Responsibilities

• Investigate security alerts and triage incidents.
• Monitor and enhance SecOps tools performance.
• Participate in on-call rota for incident readiness.

Skills

Cyber Security

Incident Response

Stakeholder Engagement

Threat Hunting

Communication Skills

Education

Degree in Cyber Security

Microsoft Security Certifications

Cyber Security Certifications (CISSP, CISM, CCSP)

Tools

Microsoft Sentinel

PAM

EDR/XDR Systems

Kusto Query Language (KQL)

Job description

As a Senior Cyber Security Analyst, you will play a critical role in strengthening Thames Water’s digital defenses by maintaining and optimizing security operations tools and processes. You’ll focus on monitoring, analyzing, and responding to cyber threats, while supporting the SOC team and ensuring effective incident management across the business.

Your role will involve collaborating with technology and business stakeholders, investigating security alerts, enhancing tooling performance, and supporting the delivery of continuous improvement and risk reduction initiatives. You’ll also contribute to readiness for significant incidents and play a key role in proactive threat hunting and compliance reporting.

What you’ll be doing as a Senior Cyber Security Analyst:

• Security Incident Response: Investigate security alerts from SIEM and third-party MSSPs, triage and respond to incidents, and support root cause analysis to drive remediation.
• Stakeholder Engagement: Work closely with technology and business teams to communicate cyber risks, recommend actions, and ensure proportionate implementation of controls.
• Tool Performance & Optimization: Monitor and enhance the performance of SecOps tools such as Microsoft Sentinel, PAM, and EDR/XDR systems, including alert tuning and automation.
• SOC Support & Escalation: Act as a key contact and escalation point for the SOC team, providing guidance and mentoring to support operational effectiveness.
• On-Call & Incident Readiness: Participate in a 24/7/365 on-call rota with our MSSP partners, supporting out-of-hours investigations and maintaining incident readiness.
• Threat Hunting & Continuous Improvement: Perform proactive threat hunting, recommend new security controls, and contribute to continuous improvement of SecOps processes.
• Compliance & Documentation: Maintain security documentation, support GDPR, NIS, and ISO 27001 compliance, and collect metrics to report on operational effectiveness and risk posture.

Base Location: Hybrid – Flexible working with travel to Thames Water offices as required

Working Pattern: Full Time / 36 Hours per week

What you should bring to the role:

Essential Experience:

• Minimum of 3 years in a technical cyber security role, ideally within a large enterprise
• Experience working in or with a Security Operations Centre (SOC)
• Structured approach to incident triage and issue resolution
• Experience remediating cyber risks in complex digital environments
• Working with third-party security partners or MSSPs

Essential Technical Skills & Qualifications:

• Strong knowledge of IT infrastructure, networking, and end-user computing
• Experience with SIEM tools, particularly Microsoft Sentinel
• Ability to write and tune Kusto Query Language (KQL) queries
• Hands-on experience with PAM, MFA, and other SecOps tools
• Excellent communication skills with the ability to explain technical issues to non-technical stakeholders

Desirable Skills & Qualifications:

• Microsoft Security certifications (e.g. SC-200, AZ-900)
• Cyber security certifications such as CISSP, CISM, or CCSP
• Degree in Cyber Security, Computer Science, or related field
• Familiarity with firewalls, IDS/IPS, VPNs, and NAC
• Experience mentoring or leading SOC analysts

What’s in it for you?

• Salary range up to £70,000 per annum.
• Annual Leave - 26 days holiday per year increasing to 30 with the length of service (plus bank holidays).
• Generous Pension Scheme through AON.
• Access to benefits supporting health, wellbeing, and finances, including health MOTs, physiotherapy, counselling, Cycle to Work schemes, shopping vouchers, and life assurance.

Find out more about our benefits and perks.

Who are we?

We’re the UK’s largest water and wastewater company, with more than 16 million customers relying on us daily. We aim to build a better future for all, helping our customers, communities, people, and the planet to thrive. We’re looking for passionate, skilled people committed to making a difference.

Learn more about our purpose and values

Working at Thames Water

Thames Water offers a rewarding, diverse environment where you can make a difference daily. We provide fast-tracked career opportunities, flexible working, and excellent benefits. Whether in call centres or science labs, we seek people with passion and a desire to improve.

If you want a sustainable career making a difference to millions and protecting water resources, we support you every step. Join us to build a better future for our customers, region, and planet.

We are committed to diversity and inclusion, removing barriers to success, and offering support during recruitment. We also offer opportunities to support customers directly, with full training provided.

Disclaimer: Due to high application volume, we may close the advert early. Apply soon to avoid missing out.