Cyber Threat & Vulnerability Analyst Job at Thames Water (Reading)

Job Description

We’re looking for a Cyber Threat & Vulnerability Analyst to join our Cyber Security team, helping protect the systems that deliver essential water services to millions of customers every day. You’ll play a key role in identifying, assessing, and reducing cyber risk across a large and complex technology estate, making sure vulnerabilities are understood, prioritised, and fixed before they can be exploited. It’s a hands-on role where you’ll work closely with technical teams and business stakeholders to keep our services safe, resilient, and running smoothly.

Job Responsibility

Support end-to-end vulnerability management across IT and operational technology environments
Help shape and improve threat and vulnerability management processes, frameworks, and ways of working
Work with technical and business teams to prioritise and remediate vulnerabilities based on risk
Investigate new vulnerabilities and recommend clear, practical mitigation actions
Support integration of vulnerability scanning tools into existing systems and processes
Build and maintain dashboards that show cyber risk, trends, and remediation progress in a clear way
Contribute to threat assessments and support proactive threat hunting activities
Help ensure alignment with standards such as General Data Protection Regulation, Payment Card Industry Data Security Standard, Network and Information Systems Regulations, and International Organization for Standardization 27001
Monitor vulnerability management tools and processes, identifying ways to improve effectiveness and reduce risk

Requirements

Experience supporting vulnerability management, patching, or cyber risk reduction in a complex environment
Understanding of cyber security concepts, including vulnerability management and threat assessment approaches
Ability to work with technical teams to support remediation of security issues
Experience or understanding of security tooling such as vulnerability scanners or similar technologies
Ability to communicate technical issues clearly to both technical and non-technical audiences
Awareness of how security risks are managed across different technology environments (for example cloud, servers, end-user devices, or operational systems)
A relevant cyber security qualification or industry certification such as Certified Information Systems Security Professional, Certified Information Security Manager, or Certified Cloud Security Professional
Must be eligible to obtain Counter Terrorist Check security clearance

Nice to have

Experience working with large enterprise or critical infrastructure environments
Familiarity with threat intelligence or threat modelling approaches
Experience supporting or improving security processes and governance
Exposure to operational technology or legacy infrastructure environments
Additional cyber security certifications such as Certified Threat Intelligence Analyst, Certified Vulnerability Assessor, Offensive Security Certified Professional, or similar

What we offer

Annual Leave - 26 days holiday per year increasing to 30 with the length of service (plus bank holidays)
Performance-related pay plan directly linked to company performance measures and targets
Generous Pension Scheme through AON
Access to lots of benefits to help you take care of you and your family’s health and wellbeing, and your finances – from annual health MOTs and access to physiotherapy and counselling, to Cycle to Work schemes, shopping vouchers and life assurance

Thames Water - All Job Offers

Select Country

Cyber Threat & Vulnerability Analyst

Job Description

Job Responsibility

Requirements

Nice to have

What we offer

Looking for more opportunities?

Cyber Threat & Vulnerability Analyst

Cyber Threat Analyst

Cyber Threat Deputy Lead

Cyber Security Soc Analyst

Cyber Information Assurance Analyst - Junior Assessor

Security Analyst

Security Analyst

Cyber Intelligence Operations Analyst

Cybersecurity Landscape Analyst

Our AI answers in your language