Job Requisition Number

9210

Work Type

Permanent

Job Function

IT

Salary Range

£52,793.00 - £62,032.00

Base

South East Hub

Closing Date

23rd September

What you’ll be responsible for

As our dedicated Cyber Threat Analyst, you will lead our efforts to integrate cyber threat intelligence into all aspects of security operations, support the expansion of threat detection capabilities in the Operational Technology environment, proactively identify external cyber threats to Welsh Water and our customers, and provide expert cyber threat input to a variety of stakeholders.

The role will have significant variety and a range of responsibilities critical to the delivery of our cyber security function. Day-to-day tasks will vary from implementing threat hunts based on the latest intelligence, proactively identifying high-risk vulnerabilities using a range of specialist tools, to drafting monthly management reports highlighting current threat levels facing the business.

Whilst cyber threat intelligence (CTI) sits at the core of the role, you will also augment the security analyst and vulnerability management team as required; supporting incident investigation, incident management, and the delivery of vulnerability management services. You will work closely with the Head of Security Operations to define and develop our CTI capability. This will include supporting the development of the CTI framework, maximising value from our CTI service providers, and designing CTI use cases.

Responsibilities:

• Leverage intelligence analysis to monitor threat actors likely to pose a threat to the business. Maintaining the Security Operations Cyber Threat Levels
• Design and implement custom detection logic and threat hunts for tactics, techniques, tools, and procedures of specific cyber threats
• Leverage external service providers and open-source tooling to monitor the external technical attack surface and domain hygiene of the business
• Leverage external service providers and open-source to identify external threats to the business; including exposed information, dark web threats, and wider targetable data
• Develop and maintain the organisation’s Strategic Threat Model and common intelligence picture
• Provide threat modelling support to Security Engineering & Architecture
• Provide SME Cyber Threat input to technology projects as required
• Analyse enterprise vulnerability status and support prioritisation of remediation activity
• Support the Head of Security Operations in development of the CTI programme for Welsh Water
• Support incident response and investigation
• Support the development of threat hunting and detection capabilities within the Operational Technology environment
• Support production of management reporting relating to threat intelligence picture and security operations
• Assess new threats to the business, seeking to optimise existing technology to better counter the issues identified
• Work with Security Engineering to enhance monitoring and response use cases
• Participate in and help coordinate training scenarios to exercise processes, tools and staff across the wider security team
• Stay up-to-date on the changing threat landscape and play an active role in appropriate intelligence-sharing communities
• Undertaking any other requirements as outlined by the line manager