Senior Cyber Threat Intelligence Analyst

idibu; Reading; Hybrid; GBP 55,000 - 65,000; Full time

Job summary

A leading company in the water industry is seeking a Senior Cyber Threat Intelligence Analyst to enhance its cybersecurity posture. The role involves assessing cyber threats, collaborating on incident response, and contributing to strategic security initiatives. The ideal candidate will have extensive experience in threat intelligence and a strong understanding of the cyber landscape.

Benefits

26 days holiday per year

Generous Pension Scheme

Health MOTs

Physiotherapy

Counselling

Cycle to Work schemes

Shopping vouchers

Life assurance

Qualifications

• Minimum of 3 years in a cyber threat intelligence environment.
• Strong knowledge of the MITRE ATT&CK framework.

Responsibilities

• Support and lead cyber threat assessments.
• Research emerging threats and threat actors.
• Maintain in-depth profiles of adversaries.

Skills

Research

Communication

Threat Intelligence

Analytical Skills

Education

Cyber security certification(s)

Tools

OSINT tools

Job description

As a Senior Cyber Threat Intelligence Analyst, you will play a key role in protecting Thames Water’s digital infrastructure by researching, analysing, and communicating the latest cyber threats facing the organisation. You’ll evaluate global risks, provide actionable intelligence to stakeholders, and support the development of a robust threat-informed defence strategy. You’ll also work collaboratively across teams to enhance our threat intelligence capabilities, inform vulnerability management, and strengthen incident response readiness.

Your role will involve maintaining threat actor profiles, managing intelligence feeds, supporting compliance, and shaping threat intelligence processes to align with our risk reduction initiatives. You’ll help ensure Thames Water is well-prepared to address evolving cyber threats while contributing to the organisation’s long-term security maturity.

What you’ll be doing as a Senior Cyber Threat Intelligence Analyst:

1. Cyber Threat Assessment: Support and lead cyber threat assessments and provide recommendations to technical, managerial, and executive stakeholders.
2. Incident Response Support: Act as part of the incident response team where appropriate and deliver cyber intelligence insights during security events.
3. Threat Research & Intelligence: Research emerging threats, threat actors, TTPs and IoCs to support threat hunting, detection engineering, and signature development.
4. Intelligence Feeds & Dashboards: Evaluate technical intelligence feeds, ensure quality of data, and build reporting dashboards for key stakeholders.
5. Vulnerability Management Collaboration: Work closely with the vulnerability management team to align intelligence with known exposures.
6. Threat Actor Profiling: Maintain in-depth profiles of adversaries, detailing motivations, objectives, and behavioural patterns.
7. External Intelligence Sharing: Establish relationships with credible external partners for mutual threat intelligence exchange.
8. Intelligence Gap Analysis: Identify and address intelligence coverage gaps and contribute to strategic security capability development.
9. Compliance & Documentation: Support compliance with GDPR, NIS, ISO 27001, and document threat intelligence processes and outputs.
10. Strategic Capability Growth: Contribute to long-term improvement of threat and vulnerability management (TVM) capabilities and the broader cybersecurity roadmap.

Base Location: Hybrid – Flexible working with travel to Thames Water offices 2 days per week.

Working Pattern: Full Time / 36 Hours per week

What you should bring to the role:

Essential Experience:

• Minimum of 3 years in a cyber threat intelligence environment
• Strong knowledge of the MITRE ATT&CK framework
• Experience researching threat actor TTPs and evaluating geopolitical, commercial, and environmental threat impacts
• Experience remediating cyber risks in complex and evolving digital environments
• Ability to prepare and present detailed threat reports and dashboards to senior stakeholders

Essential Technical Skills & Qualifications:

• Cyber security certification(s) such as Certified Threat Intelligence Analyst (CTIA)
• Hands-on experience with threat modelling, OSINT tools, and vulnerability assessment
• Deep understanding of adversary behaviours and threat landscape trends
• Strong communication skills with the ability to convey technical risk clearly to non-technical stakeholders

Desirable Skills & Qualifications:

• Experience working within the water industry or similar large infrastructure environments
• Familiarity with legacy system vulnerabilities and OT risk management
• Experience managing technical intelligence feeds and platform integration
• Additional certifications such as OSCP, OSWP, CVA, or CHECK Team Member/Leader (CTM/CTL)
• Previous experience contributing to cyber risk discussions with business stakeholders

What’s in it for you?

• Competitive salary of up to £65,000 per annum, depending on experience.
• Annual Leave: 26 days holiday per year increasing to 30 with the length of service (plus bank holidays).
• Generous Pension Scheme through AON.
• Access to benefits including health MOTs, physiotherapy, counselling, Cycle to Work schemes, shopping vouchers, and life assurance.

Who are we?

We’re the UK’s largest water and wastewater company, with more than 16 million customers relying on us every day to supply water. We aim to build a better future for all, helping our customers, communities, people, and the planet to thrive. We’re committed to making a difference and supporting our employees to do the same.

Learn more about our purpose and values

Working at Thames Water

Thames Water offers a diverse, rewarding environment where every day presents new opportunities. We provide fast-tracked career paths, flexible working, and excellent benefits. Join us if you’re passionate about making a difference and contributing to a sustainable future.

We are committed to diversity and inclusion, welcoming applications from everyone and providing support throughout the recruitment process. We also offer opportunities to support our customers directly during crises, with full training provided.

Disclaimer: Due to high application volumes, we may close the advert early. We encourage you to apply promptly.