DWR Cymru Cyfyngedig Welsh Water Plc
Dadansoddwr Bygythiadau Seiber
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Job Reference Number
9210
Type of Employment
Permanent
Job Function
IT
Salary Range
£52,793.00 - £62,032.00
Location
South East Hub
Closing Date
23 Medi
Role Overview
As our designated Cyber Threat Intelligence Analyst, you will lead our efforts to integrate cyber threat intelligence into every aspect of security operations, support the expansion of threat detection capabilities in the Operational Technology environment, proactively identify external cyber threats for Dŵr Cymru and our customers, and provide specialist cyber threat intelligence input to a variety of stakeholders. The role will have significant variety and a range of responsibilities that are essential to fulfilling our cyber security function. Daily tasks will vary from executing threat intelligence searches based on the latest intelligence, proactively identifying high-risk vulnerabilities using a range of specialist tools, to drafting monthly management reports that highlight current threat levels facing the business. While cyber threat intelligence (CTI) is at the core of the role, you will also expand the security intelligence and vulnerability management team as needed; support the work of incident investigation, incident management, and provide vulnerability management services. You will work closely with the Head of Security Operations to define and develop our CTI capability. This will include supporting the development of the CTI framework, maximizing value from our CTI service providers, and designing CTI use cases.
Responsibilities:
- Analysis of information to monitor threat actors likely to be a threat to the business. Maintain Operational Security Threat Levels
- Design and implement purpose-built detection rationales and threat intelligence searches for specific cyber threat tactics, techniques, tools, and procedures
- Use of external service providers and open-source tools to monitor the external threat landscape and the business's domain hygiene
- Use of external service providers and open-source to identify external threats to the business; including open-source intelligence, dark web threats, and data that could be more broadly targeted
- Develop and maintain the organization's Strategic Threat Model and common intelligence picture
- Provide threat modeling support to Security Engineering and Architecture
- Provide SME Business Intelligence to technology projects as required
- Analyze enterprise vulnerability status and support prioritization of remediation activity
- Support the Head of Security Operations in developing the CTI program for Dŵr Cymru
- Support incident response and investigation
- Support the development of threat detection and threat intelligence search capabilities within the Operational Technology environment
- Support the production of management reports relating to the threat intelligence picture and security operations
- Assess new threats to the business, seeking to optimize current technology to better address the issues identified
- Work with Security Engineering to improve monitoring and response use cases
- Participate in and assist in the work to align training scenarios to exercise processes, tools, and staff across the wider security team
- Be aware of the latest information about the evolving threat landscape and play an active role in appropriate intelligence sharing communities
- Undertake any other requirements as outlined by the line manager
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Who You'll Work With
About You
One or more of the following:
- GIAC certifications such as: GCIH, GCIA, GDAT, GCDA, GISP, GCFE. CompTIA certifications such as: Security+, CySA+
- Certifications such as: CRTIA, GCTI
- Certifications such as: Security+, CySA+
- Other formal intelligence/cyber security qualification
- Experience in any of the following: Cyber Security; IT Operations / engineering; Security incident management; intelligence, cyber threat intelligence
- Experience of understanding the Cyber Kill Chain, MITRE ATT&CK and other defense and intelligence frameworks.
- Detailed understanding of enterprise-grade technical security controls and defenses
- Demonstrable experience of managing internal and external stakeholders
- Passionate about putting our customers' needs first every day
- Understanding of the cyber threat environment and methods of achieving threat intelligence
- Strong understanding of threat intelligence analysis techniques
- Understanding of intelligence sharing formats and related file types; such as STIX/TAXII, YAML, YARA, JSON
- Strong understanding of the Cyber Kill Chain, MITRE ATT&CK and other information security and intelligence frameworks
Worth Knowing
If you would like more information about this role, contact
There will be a requirement to participate in a backup rota
Benefits
In addition to a competitive salary in the market, 34 days annual leave (pro rata, including public holidays), we offer a range of employee benefits and recognition including:
- Flexible pay schemes (your pay band will remain the same, but depending on performance, you could receive within-band progression and annual incentive)
- Option to purchase additional annual leave up to 5 days per year
- Employer pension contributions above – Up to 11% employer contribution
- Free Mortgage Broker Services
- Improved family-friendly policies
- Succession opportunities, including the ability to apply for funded training and mentoring programs
- Discount on gym membership and high street stores
- Cycle to work scheme
- Discount on all visitor attraction centers and Dŵr Cymru stores
- Car lease and free on-site parking at all sites
- Health Cash Back scheme and access to online GP service
- Employee Assistance Program for employees and their close family
- Much more to see on our website.
Due to the nature of the industry, a satisfactory medical clearance post offer, and a Basic Disclosure criminal records check is required on all new employees joining the business.
For some roles, additional checks and security clearances may be required, and this offer is conditional upon all checks being satisfied. You will receive further information on how to complete these checks via email after you receive an offer.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Who We Are
Dŵr Cymru keeps 3 million people healthy every day with safe, reliable water, and takes wastewater to be cleaned, before returning it safely to our rivers and beautiful seas.
To be able to provide high-quality essential services that help protect the health of our customers, colleagues, and our environment, we need the right people to achieve our vision. This is achieved by living our core values and demonstrating the core behaviors that underpin them. The safety of our people, our assets, and our information is key to us, so we are looking for people who understand and comply with the company's required security objectives.
We know that the most successful teams are the most diverse teams. Equality, diversity, and inclusion provide a foundation for our culture at Dŵr Cymru. We want everyone to feel confident, proud, and able to be themselves at work. To ensure better representation in our workforce, we particularly welcome applications from minority groups including Black, Asian, and Ethnic Minorities, Women, LGBT+, disabled people, and people with disabilities. Together, we continue to create a workplace that not only celebrates the diverse voices of our colleagues but also represents every customer we serve.
At its core, our company is based on trust, openness, respect, commitment, and honesty. A company that our colleagues are proud to work for.
Dŵr Cymru Cyf, a limited company registered in Wales number 2366777. Registered office: Heol Pentwyn, Nelson, Treharris, Mid Glamorgan CF46 6LY
© Dŵr Cymru Cyf 2019.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London