Cyber Security Analyst in Cardiff

Monitoring, supporting and analysing the security tooling (such as the SIEM, XDR, Firewalls, security posture tooling etc.) for suspicious activity. The team is threat‑led and when there are no alarm/events to be investigated the team performs threat hunting, looking for previously undetected threats.

Responsibilities

• Continually monitor the organisation's security systems and related infrastructure for signs of compromise.
• Proactively use available toolsets to hunt for issues using threat intelligence relevant to the organisation.
• Coordinate security changes with IT and OT stakeholders.
• Work with the broader Security Operations teams to investigate, contain and remediate cyber security incidents.
• Assess new threats to the business, seeking to optimise existing technology to better counter the issues identified.
• Support the assessment of supplier security.
• Ensure all security events are investigated and documented to completion.
• Analyse and offer improvements against use cases and playbooks.
• Work with Security Engineering to enhance monitoring and response use cases.
• Participate in and help coordinate training scenarios to exercise processes, tools and staff across the wider security team.
• Stay up‑to‑date on the changing threat landscape.
• Undertake any other requirements as outlined by the line manager.

Team Internal stakeholders you will work with:

• Security Operations Manager
• Security Incident Response Lead
• Security Engineers
• IT & OT Engineers
• IT & OT Network Engineers
• IT Service Management

External Partners

• IT & Security Outsource Partners
• Security product vendors

Qualifications

• Relevant qualification or Degree in a technical discipline such as Computer Science, Engineering, Data analytics, Networking, or Information Security.
• Experience in cyber security, IT operations/engineering, or security incident management.
• Understanding of the Cyber Kill Chain, MITRE ATT&CK and other information security defence and intelligence frameworks.

Desirable

• Demonstrated experience in cloud-based infrastructure including Microsoft Azure, Office 365, Amazon AWS.
• Understanding of enterprise‑grade technical security controls and defence in depth.
• Demonstrated experience in stakeholder management both internal and external.
• Knowledge of a programming or scripting language such as Python.
• Strong understanding of the Cyber Kill Chain, MITRE ATT&CK and other information security defence and intelligence frameworks.

Dŵr Cymru Welsh Water keeps 3 million people healthy each day with safe, reliable water, and takes away wastewater to clean, before returning it safely to our beautiful rivers and seas. To be able to deliver high quality, essential services which help protect the health of our customers, colleagues and our environment, we need the right people to deliver on our vision. This is achieved by living our core values and demonstrating the core behaviours that underpin them. The security of our people, assets and information is key to us, so we are looking for people who understand and comply with the company's required security objectives. We know that the most successful teams are the most diverse teams. Equality, diversity and inclusion provide the very foundation to our culture at Welsh Water. We want every individual to feel confident, proud and able to bring their whole selves to work. To ensure an improved representation in our workforce, applications are particularly welcome from minority groups including Black, Asian and Minority Ethnic people, Females, LGBTQ+ individuals, Non‑binary people and people with disabilities. Together we continue to build a workplace that not only celebrates the diverse voices of our colleagues but also represents each customer we serve. In essence, ours is a company based on trust, openness, respect, commitment and honesty. A company that our colleagues are proud to work for.

Benefits

• Variable pay schemes (salary band remains the same, but performance‑based incremental within‑band increase and a yearly incentive).
• Option to buy additional annual leave up to 5 days per year.
• Enhanced employer pension contributions – up to 11% employer contributions.
• Free mortgage brokering services.
• Enhanced family‑friendly policies.
• Progression opportunities, including the ability to apply for funded training and coaching and mentoring programmes.
• Gym and fitness discounts as well as high street shopping.
• Cycle‑to‑work scheme.
• Discount off all Welsh Water visitor attraction centres and gift shops.
• Car‑leasing scheme and free on‑site parking at all sites.
• Health CashBack scheme and access to an online GP service.
• An employee assistance programme for employees and their immediate family.
• Many more can be found on our website.

Due to the nature of the industry, we require satisfactory references, a post‑offer medical clearance, and a criminal records Basic Disclosure check on all new employees joining the business. For some roles there may be additional checks and security clearance required, and this offer is subject to all checks being satisfied. You will receive further information on how to complete these checks via email once you have accepted this offer.