Senior Cyber Threat Intelligence Analyst

Thames Water Utilities Limited; Reading; Hybrid; GBP 65,000; Full time

Job summary

An established industry player seeks a Senior Cyber Threat Intelligence Analyst to safeguard digital infrastructure. In this pivotal role, you will assess cyber threats, provide actionable intelligence, and enhance incident response strategies. Collaborating across teams, you will shape threat intelligence processes and contribute to the organization’s long-term security maturity. With a competitive salary and a hybrid working model, this role offers a unique opportunity to make a significant impact in a dynamic environment focused on protecting water resources for millions of customers. Join a diverse team committed to innovation and excellence.

Benefits

26 days annual leave

Generous Pension Scheme

Health and wellbeing benefits

Flexible working arrangements

Cycle to Work schemes

Qualifications

• Minimum 3 years in a cyber threat intelligence environment.
• Strong knowledge of the MITRE ATT&CK framework and threat actor TTPs.

Responsibilities

• Lead cyber threat assessments and provide recommendations.
• Research emerging threats and maintain threat actor profiles.
• Support compliance with GDPR, NIS, and ISO 27001.

Skills

Cyber Threat Intelligence

MITRE ATT&CK Framework

Threat Research

Incident Response

Communication Skills

Education

Cyber Security Certification (CTIA)

Bachelor's Degree in Cyber Security or related field

Tools

OSINT Tools

Vulnerability Assessment Tools

Job description

Job title Senior Cyber Threat Intelligence Analyst Ref 40789 Division Digital Transformation Location Reading - Clearwater Court - RG1 8DB Contract type Permanent Full/Part-time Full-time Hours 36 Salary Offering up to £65,000 per annum depending on experience Job grade B Closing date 15/05/2025

As a Senior Cyber Threat Intelligence Analyst, you will play a key role in protecting Thames Water’s digital infrastructure by researching, analysing, and communicating the latest cyber threats facing the organisation. You’ll evaluate global risks, provide actionable intelligence to stakeholders, and support the development of a robust threat-informed defence strategy. You’ll also work collaboratively across teams to enhance our threat intelligence capabilities, inform vulnerability management, and strengthen incident response readiness.

Your role will involve maintaining threat actor profiles, managing intelligence feeds, supporting compliance, and shaping threat intelligence processes to align with our risk reduction initiatives. You’ll help ensure Thames Water is well-prepared to address evolving cyber threats while contributing to the organisation’s long-term security maturity.

What you’ll be doing as a Senior Cyber Threat Intelligence Analyst:

• Cyber Threat Assessment: Support and lead cyber threat assessments and provide recommendations to technical, managerial, and executive stakeholders.
• Incident Response Support: Act as part of the incident response team where appropriate and deliver cyber intelligence insights during security events.
• Threat Research & Intelligence: Research emerging threats, threat actors, TTPs and IoCs to support threat hunting, detection engineering and signature development.
• Intelligence Feeds & Dashboards: Evaluate technical intelligence feeds, ensure quality of data, and build reporting dashboards for key stakeholders.
• Vulnerability Management Collaboration: Work closely with the vulnerability management team to align intelligence with known exposures.
• Threat Actor Profiling: Maintain in-depth profiles of adversaries, detailing motivations, objectives, and behavioural patterns.
• External Intelligence Sharing: Establish relationships with credible external partners for mutual threat intelligence exchange.
• Intelligence Gap Analysis: Identify and address intelligence coverage gaps and contribute to strategic security capability development.
• Compliance & Documentation: Support compliance with GDPR, NIS, ISO 27001, and document threat intelligence processes and outputs.
• Strategic Capability Growth: Contribute to long-term improvement of threat and vulnerability management (TVM) capabilities and the broader cyber security roadmap.

Base Location: Hybrid – Flexible working with travel to Thames Water offices as required
Working Pattern: Full Time / 36 Hours per week

What you should bring to the role:

• Minimum of 3 years in a cyber threat intelligence environment
• Strong knowledge of the MITRE ATT&CK framework
• Experience researching threat actor TTPs and evaluating geopolitical, commercial, and environmental threat impacts
• Experience remediating cyber risks in complex and evolving digital environments
• Ability to prepare and present detailed threat reports and dashboards to senior stakeholders

Essential Technical Skills & Qualifications:

• Cyber security certification(s) such as Certified Threat Intelligence Analyst (CTIA)
• Hands-on experience with threat modelling, OSINT tools, and vulnerability assessment
• Deep understanding of adversary behaviours and threat landscape trends
• Strong communication skills with the ability to convey technical risk clearly to non-technical stakeholders

Desirable Skills & Qualifications:

• Experience working within the water industry or similar large infrastructure environments
• Familiarity with legacy system vulnerabilities and OT risk management
• Experience managing technical intelligence feeds and platform integration
• Additional certifications such as OSCP, OSWP, CVA, or CHECK Team Member/Leader (CTM/CTL)
• Previous experience contributing to cyber risk discussions with business stakeholders

What’s in it for you?

• Competitive salary of up to £65,000 per annum, depending on experience.
• Annual Leave - 26 days holiday per year increasing to 30 with the length of service (plus bank holidays).
• Generous Pension Scheme through AON.
• Access to lots of benefits to help you take care of you and your family’s health and wellbeing, and your finances – from annual health MOTs and access to physiotherapy and counselling to Cycle to Work schemes, shopping vouchers and life assurance.

Who are we?

We’re the UK’s largest water and wastewater company, with more than 16 million customers relying on us every day to supply water for their taps and toilets. We want to build a better future for all, helping our customers, communities, people and the planet to thrive. It’s a big job and we’ve got a long way to go, so we need help from passionate and skilled people, committed to making a difference and getting us to where we want to be in the years and decades to come.

Thames Water is a unique, rewarding and diverse place to work, where every day you can make a difference, yet no day is the same. As part of our family, you’ll enjoy fast-tracked career opportunities, flexible working arrangements and excellent benefits.

Whether you’re interested in a role in one of our call centres or science labs, we’re looking for people like you with real passion and a burning desire to make things better.

So, if you’re looking for a sustainable and successful career where you can make a daily difference to millions of people’s lives while helping to protect the world of water for future generations, we’ll be here to support you every step of the way. Together, we can build a better future for our customers, our region and our planet.

Real purpose, real support, real opportunities. Come and join the Thames Water family. Why choose us? Learn more.

Our overarching aim is to ensure that Thames Water is great, diverse, and inclusive place to work. We welcome applications from everyone and offer extra support for those who need it throughout the recruitment process . Our aim is to remove any real or perceived barriers to success, so if you need assistance, we’re here to help and support .

When a crisis happens, we all rally around to support our customers. As part of Team Thames, you’ll have the opportunity to sign up to support our customers on the frontline as an ambassador. Full training will be given for what is undoubtedly an incredibly rewarding experience. It’s also a great opportunity to learn more about our business and meet colleagues.

Disclaimer: due to the high volume of applications we receive, we may close the advert earlier than the advertised date, so we encourage you to apply as soon as possible to avoid disappointment.