Senior Cyber Threat Intelligence Analyst

Thames Water; Reading; Hybrid; GBP 50,000 - 65,000; Full time

Job summary

Join a forward-thinking company as a Senior Cyber Threat Intelligence Analyst, where your expertise will help protect vital digital infrastructure. In this dynamic role, you'll assess and respond to cyber threats, collaborate across teams, and contribute to the development of a robust security strategy. With a focus on continuous improvement and strategic capability growth, you'll play a pivotal role in enhancing the organization's security posture. Enjoy a competitive salary, flexible working arrangements, and a supportive environment that values your contributions to protecting our water resources.

Benefits

26 days annual leave (increasing to 30)

Generous Pension Scheme

Health and wellbeing benefits

Flexible working arrangements

Cycle to Work schemes

Shopping vouchers

Life assurance

Qualifications

• Minimum of 3 years experience in cyber threat intelligence.
• Strong knowledge of the MITRE ATT&CK framework and threat actor TTPs.

Responsibilities

• Lead cyber threat assessments and provide actionable intelligence.
• Collaborate on incident response and threat intelligence processes.

Skills

Cyber Threat Intelligence

MITRE ATT&CK Framework

Threat Actor Research

Incident Response

Threat Modeling

OSINT Tools

Communication Skills

Education

Cyber Security Certification (CTIA)

Additional Certifications (OSCP, OSWP, CVA)

Tools

Vulnerability Assessment Tools

Job description

As a Senior Cyber Threat Intelligence Analyst, you will play a key role in protecting Thames Water’s digital infrastructure by researching, analysing, and communicating the latest cyber threats facing the organisation. You’ll evaluate global risks, provide actionable intelligence to stakeholders, and support the development of a robust threat-informed defence strategy. You’ll also work collaboratively across teams to enhance our threat intelligence capabilities, inform vulnerability management, and strengthen incident response readiness.

Your role will involve maintaining threat actor profiles, managing intelligence feeds, supporting compliance, and shaping threat intelligence processes to align with our risk reduction initiatives. You’ll help ensure Thames Water is well-prepared to address evolving cyber threats while contributing to the organisation’s long-term security maturity.

What you’ll be doing as a Senior Cyber Threat Intelligence Analyst:

• Cyber Threat Assessment: Support and lead cyber threat assessments and provide recommendations to technical, managerial, and executive stakeholders.
• Incident Response Support: Act as part of the incident response team where appropriate and deliver cyber intelligence insights during security events.
• Threat Research & Intelligence: Research emerging threats, threat actors, TTPs and IoCs to support threat hunting, detection engineering and signature development.
• Intelligence Feeds & Dashboards: Evaluate technical intelligence feeds, ensure quality of data, and build reporting dashboards for key stakeholders.
• Vulnerability Management Collaboration: Work closely with the vulnerability management team to align intelligence with known exposures.
• Threat Actor Profiling: Maintain in-depth profiles of adversaries, detailing motivations, objectives, and behavioural patterns.
• External Intelligence Sharing: Establish relationships with credible external partners for mutual threat intelligence exchange.
• Intelligence Gap Analysis: Identify and address intelligence coverage gaps and contribute to strategic security capability development.
• Compliance & Documentation: Support compliance with GDPR, NIS, ISO 27001, and document threat intelligence processes and outputs.
• Strategic Capability Growth: Contribute to long-term improvement of threat and vulnerability management (TVM) capabilities and the broader cyber security roadmap.

Base Location: Hybrid – Flexible working with travel to Thames Water offices as required
Working Pattern: Full Time / 36 Hours per week

What you should bring to the role:
Essential Experience:

• Minimum of 3 years in a cyber threat intelligence environment
• Strong knowledge of the MITRE ATT&CK framework
• Experience researching threat actor TTPs and evaluating geopolitical, commercial, and environmental threat impacts
• Experience remediating cyber risks in complex and evolving digital environments
• Ability to prepare and present detailed threat reports and dashboards to senior stakeholders

Essential Technical Skills & Qualifications:

• Cyber security certification(s) such as Certified Threat Intelligence Analyst (CTIA)
• Hands-on experience with threat modelling, OSINT tools, and vulnerability assessment
• Deep understanding of adversary behaviours and threat landscape trends
• Strong communication skills with the ability to convey technical risk clearly to non-technical stakeholders

Desirable Skills & Qualifications:

• Experience working within the water industry or similar large infrastructure environments
• Familiarity with legacy system vulnerabilities and OT risk management
• Experience managing technical intelligence feeds and platform integration
• Additional certifications such as OSCP, OSWP, CVA, or CHECK Team Member/Leader (CTM/CTL)
• Previous experience contributing to cyber risk discussions with business stakeholders

What’s in it for you?

• Competitive salary of up to £65,000 per annum, depending on experience.
• Annual Leave - 26 days holiday per year increasing to 30 with the length of service (plus bank holidays).
• Generous Pension Scheme through AON.
• Access to lots of benefits to help you take care of you and your family’s health and wellbeing, and your finances – from annual health MOTs and access to physiotherapy and counselling to Cycle to Work schemes, shopping vouchers and life assurance.

Who are we?
We’re the UK’s largest water and wastewater company, with more than 16 million customers relying on us every day to supply water for their taps and toilets. We want to build a better future for all, helping our customers, communities, people and the planet to thrive. It’s a big job and we’ve got a long way to go, so we need help from passionate and skilled people, committed to making a difference and getting us to where we want to be in the years and decades to come.

Learn more about our purpose and values

Working at Thames Water
Thames Water is a unique, rewarding and diverse place to work, where every day you can make a difference, yet no day is the same. As part of our family, you’ll enjoy fast-tracked career opportunities, flexible working arrangements and excellent benefits.
Whether you’re interested in a role in one of our call centres or science labs, we’re looking for people like you with real passion and a burning desire to make things better.

So, if you’re looking for a sustainable and successful career where you can make a daily difference to millions of people’s lives while helping to protect the world of water for future generations, we’ll be here to support you every step of the way. Together, we can build a better future for our customers, our region and our planet.

Real purpose, real support, real opportunities. Come and join the Thames Water family. Why choose us? Learn more.

Our overarching aim is to ensure that Thames Water is great, diverse, and inclusive place to work. We welcome applications from everyone and offer extra support for those who need it throughout the recruitment process. Our aim is to remove any real or perceived barriers to success, so if you need assistance, we’re here to help and support.

When a crisis happens, we all rally around to support our customers. As part of Team Thames, you’ll have the opportunity to sign up to support our customers on the frontline as an ambassador. Full training will be given for what is undoubtedly an incredibly rewarding experience. It’s also a great opportunity to learn more about our business and meet colleagues.

Disclaimer: due to the high volume of applications we receive, we may close the advert earlier than the advertised date, so we encourage you to apply as soon as possible to avoid disappointment.