What you’ll be doing
as a Cyber Security Engineer
1. Collaborate with stakeholders to design, implement, and maintain security controls that meet business, compliance, and risk mitigation requirements.
2. Own or provide consultation to security controls, ensuring continuous control effectiveness.
3. Develop and manage operational procedures and reporting methodologies.
4. Oversee security technology platforms, whether operated internally or through service providers.
5. Monitor control performance, coordinate remediation, and drive continuous improvement.
6. Automate operational procedures and reporting processes, integrating outputs into risk reporting frameworks.
7. Work closely with IT and OT teams to ensure controls are implemented according to agreed baselines.
8. Align control design with industry standards, regulations, and best practices such as NIS, ISO 27001, and GDPR.
9. Support internal and external audits, reviews, and assessments of security controls.
10. Identify and implement improvements to enhance control coverage and resilience.
11. Provide expert advice on technology, best practices, and delivery models.
12. Support integration of security controls into SIEM and SOC processes for improved visibility and response automation.
13. Develop and present dashboards and metrics demonstrating measurable risk reduction and technical debt reduction.
14. Contribute to the advancement of Thames Water’s strategic cyber capability roadmap and engineering maturity.
Base location – Hybrid – Clearwater Court, Reading.
Working pattern – 36 hours Monday to Friday.
What you should bring to the role
15. Experience in designing, implementing, and maintaining security controls, including automation of operational procedures and reporting methodologies.
16. Hands-on knowledge of network, identity, host, and/or cloud-based security technology platforms.
17. Experience supporting internal and/or external information security audits.
18. Strong understanding of IT and OT systems, infrastructure, and security best practices.
19. Familiarity with security engineering technologies, including Microsoft Azure, Defender, and Sentinel.
20. Ability to clearly explain complex IT and security concepts to non-technical stakeholders.
21. Strong analytical, problem-solving, planning, and organisational skills.
22. Degree in Cyber Security, Computer Science, Information Technology, Engineering, or a related field.
23. Industry certifications such as CCSP, SSCP, CompTIA Security+, or SC-200 are preferable.
It would be great if you also had
24. Experience in Security Engineering, control design, and implementation within an enterprise environment.
25. Previous experience working in the water utility industry or a large, complex infrastructure-based organisation.
26. Experience supporting or implementing an Information Security Management System (e.g. ISO 27001).
27. Hands-on experience with reporting and analytics tools such as Power BI.
28. Security engineering vendor or product certifications, such as Certified Vulnerability Assessor (CVA), Microsoft Certified: Azure Security Engineer Associate, or Tenable.
What’s in it for you?
29. Competitive salary between £52,000 and £67,000 per annum, depending on experience.
30. Annual Leave - 26 days holiday per year, increasing to 30 with the length of service. (plus bank holidays)
31. Generous Pension Scheme through AON.
32. Performance-related pay plan directly linked to company performance measures and targets
33. Access to lots of benefits to help you take care of you and your family’s health and wellbeing, and your finances – from annual health MOTs and access to physiotherapy and counselling, to Cycle to Work schemes, shopping vouchers and life assurance.