Senior Cyber Threat Intelligence Analyst

As a Senior Cyber Threat Intelligence Analyst, you will play a key role in protecting Thames Water’s digital infrastructure by researching, analysing, and communicating the latest cyber threats facing the organisation. You’ll evaluate global risks, provide actionable intelligence to stakeholders, and support the development of a robust threat-informed defence strategy. You’ll also work collaboratively across teams to enhance our threat intelligence capabilities, inform vulnerability management, and strengthen incident response readiness. Your role will involve maintaining threat actor profiles, managing intelligence feeds, supporting compliance, and shaping threat intelligence processes to align with our risk reduction initiatives. You’ll help ensure Thames Water is well-prepared to address evolving cyber threats while contributing to the organisation’s long-term security maturity.

What you’ll be doing:

• Cyber Threat Assessment: Support and lead cyber threat assessments and provide recommendations to technical, managerial, and executive stakeholders.
• Incident Response Support: Act as part of the incident response team where appropriate and deliver cyber intelligence insights during security events.
• Threat Research & Intelligence: Research emerging threats, threat actors, TTPs and IoCs to support threat hunting, detection engineering and signature development.
• Intelligence Feeds & Dashboards: Evaluate technical intelligence feeds, ensure quality of data, and build reporting dashboards for key stakeholders.
• Vulnerability Management Collaboration: Work closely with the vulnerability management team to align intelligence with known exposures.
• Threat Actor Profiling: Maintain in-depth profiles of adversaries, detailing motivations, objectives, and behavioural patterns.
• External Intelligence Sharing: Establish relationships with credible external partners for mutual threat intelligence exchange.
• Intelligence Gap Analysis: Identify and address intelligence coverage gaps and contribute to strategic security capability development.
• Compliance & Documentation: Support compliance with GDPR, NIS, ISO 27001, and document threat intelligence processes and outputs.
• Strategic Capability Growth: Contribute to long-term improvement of threat and vulnerability management (TVM) capabilities and the broader cyber security roadmap.

What you should bring to the role:

• Minimum of 3 years in a cyber threat intelligence environment.
• Strong knowledge of the MITRE ATT&CK framework.
• Experience researching threat actor TTPs and evaluating geopolitical, commercial, and environmental threat impacts.
• Experience remediating cyber risks in complex and evolving digital environments.
• Ability to prepare and present detailed threat reports and dashboards to senior stakeholders.

Essential Technical Skills & Qualifications:

• Cyber security certification(s) such as Certified Threat Intelligence Analyst (CTIA).
• Hands-on experience with threat modelling, OSINT tools, and vulnerability assessment.
• Deep understanding of adversary behaviours and threat landscape trends.
• Strong communication skills with the ability to convey technical risk clearly to non-technical stakeholders.

Desirable Skills & Qualifications:

• Experience working within the water industry or similar large infrastructure environments.
• Familiarity with legacy system vulnerabilities and OT risk management.
• Experience managing technical intelligence feeds and platform integration.
• Additional certifications such as OSCP, OSWP, CVA, or CHECK Team Member/Leader (CTM/CTL).
• Previous experience contributing to cyber risk discussions with business stakeholders.

What’s in it for you?

• Competitive salary of up to £65,000 per annum, depending on experience.
• Annual Leave - 26 days holiday per year increasing to 30 with the length of service (plus bank holidays).
• Generous Pension Scheme through AON.
• Access to lots of benefits to help you take care of you and your family’s health and wellbeing, and your finances – from annual health MOTs and access to physiotherapy and counselling to Cycle to Work schemes, shopping vouchers and life assurance.

Who are we?

We’re the UK’s largest water and wastewater company, with more than 16 million customers relying on us every day to supply water for their taps and toilets. We want to build a better future for all, helping our customers, communities, people and the planet to thrive. It’s a big job and we’ve got a long way to go, so we need help from passionate and skilled people, committed to making a difference and getting us to where we want to be in the years and decades to come. Thames Water is a unique, rewarding and diverse place to work, where every day you can make a difference, yet no day is the same. As part of our family, you’ll enjoy fast-tracked career opportunities, flexible working arrangements and excellent benefits.

Our overarching aim is to ensure that Thames Water is a great, diverse, and inclusive place to work. We welcome applications from everyone and offer extra support for those who need it throughout the recruitment process. Our aim is to remove any real or perceived barriers to success, so if you need assistance, we’re here to help and support.