Cyber Security Analyst

This is an incredibly exciting time to join Southern Water’s Digital Directorate, as we continue a major transformation journey that places cyber resilience and digital innovation at the very heart of the organisation.

As a Cyber Security Analyst, you will play a critical role in safeguarding both our digital and operational technology (OT) environments. You’ll lead investigations, own incident response actions, and drive improvements across our cyber monitoring capability. This is a hands‐on, high‐impact role where your expertise will directly strengthen the security of essential services relied upon by millions. Working alongside our Senior Cyber Analysts, SOC partners, Digital teams and OT Operations, you’ll help shape how we detect, respond to and learn from emerging threats and contribute to the continual uplift of our cyber maturity across the enterprise.

What you will be responsible for

You’ll lead proactive security monitoring, manage end‐to‐end incident investigations, and enhance our forensic, monitoring and detection capabilities.

• Leading proactive security monitoring and threat detection across IT and OT environments, making autonomous prioritisation and response decisions.
• Owning cyber incident investigations, from initial triage through to containment recommendations and coordinated remediation.
• Managing digital forensics activities, ensuring data integrity, compliance and high‐quality executive and technical reporting.
• Enhancing monitoring platforms, rules, playbooks and SOC tooling to continually strengthen our defence posture.
• Supporting organisation‐wide awareness, learning, and capability development in DFIR and threat detection.

Additional requirements specific to this role

• Work across critical infrastructure, IT and OT environments as part of incident response and monitoring cycles.
• Engage with regulated frameworks and expectations including ISO 27001, NIST CSF and CAFv4.
• May be required to support out‐of‐hours incident handling depending on operational need.

What you’ll bring to the role

Essential

• Advanced understanding of cyber security principles, monitoring tools and incident response methodologies.
• Experience with SIEM and EDR platforms such as LogRhythm, Microsoft Defender for Endpoint or CrowdStrike.
• Strong capability in triage, investigation and root‐cause analysis of cyber incidents.
• Solid grounding in network, endpoint and identity security fundamentals.
• Educated to degree level (or equivalent experience) with 3–7 years’ experience in cyber operations, SOC analysis or DFIR.
• Strong understanding of vulnerabilities, exploits and remediation approaches.

Desirable

• Recognised industry certifications (e.g., GCIH, GCFA, GCFE, CEH, Security+, GIAC).
• Exposure to incident handling, forensic investigation or critical infrastructure environments.
• Experience with scripting or automation (PowerShell, Python).

Southern Water is at the forefront of transforming Britain’s water industry, investing significantly to enhance resilience, sustainability, and service excellence. With £7.8bn planned investment for 2025-30, this is an unparalleled opportunity to join a business committed to delivering a generational shift in the way water services are managed.

You will be joining at a time of significant change, working alongside a highly skilled leadership team with a clear vision for the future. We offer an environment where senior professionals can make a meaningful impact, influence major strategic decisions, and drive long-term value creation.

At Southern Water, we believe diverse perspectives drive innovation. If you’re passionate about making a positive impact and think you can bring value to our team, we’d love to hear from you—even if you don’t tick every box. Your unique skills and experiences could be exactly what we need.

Our Commitment to Diversity: We welcome applicants from all backgrounds, identities, and experiences. We do not discriminate based on race, ethnicity, gender, sexual orientation, age, disability, religion, or any other protected characteristic. If you need reasonable adjustments during the recruitment process, please let us know.