Location
Hybrid – Clearwater Court, Reading

Hours
36 hours per week, Monday to Friday

Salary
Up to £78,000 per annum depending on experience

About the Role
As a Senior Cyber Security Engineer, you will play a critical role in delivering Thames Water’s cyber strategy, responsible for the design, implementation, and ongoing effectiveness of security capabilities across IT and OT environments. You will engineer and maintain technical capabilities that enable early threat detection, rapid and consistent response, and sustained cyber risk reduction. This hands-on engineering role involves building resilient security capabilities, integrating platforms and telemetry, and translating cyber risk, regulatory, and business demands into practical, measurable, and operationally sustainable security controls.

You will collaborate with stakeholders to design, implement, and maintain security controls that meet business, compliance, and risk mitigation requirements, ensuring they are effective and operationally sustainable. You will implement and maintain detection and response capabilities through SIEM integration, focusing on reducing time-to-detect and time-to-remediate through improved pre-incident engineering.

Responsibilities include participation in a 24x7 on-call support rota responding to SIEM health alerts, managing use cases, performing data enrichment, defining automated containment workflows, developing operational procedures and reporting methodologies, and overseeing security technology platforms such as SIEM, SOAR, EDR, and email security. You will monitor control performance, coordinate remediation, automate procedures, liaise with IT and OT teams, align controls with industry standards (e.g. NIS, ISO27001, GDPR), support audits, and proactively advise on technology and best practices.

To be eligible for this role, you must be able to obtain Counter Terrorist Check (CTC) Clearance.

Experience
- Security engineering with a focus on detection and response in enterprise environments
- Strong understanding of IT and OT systems and infrastructure
- Identifying and remediating cyber risks in evolving digital environments
- Familiarity with SIEM, EDR, email security, and identity and access management technologies (e.g. Entra ID, CyberArk)
- Knowledge of operating systems and security considerations across SaaS, IaaS, end-user computing, and server estates
- Sound knowledge of cloud and network security technologies
- Experience working in large, complex infrastructure or water utility organisations is desirable
- Experience in systems or network administration in IT and/or OT environments is advantageous
- Experience leading or mentoring others in delivering cybersecurity outcomes is a plus
- Security engineering vendor or product certifications such as Microsoft Certified: Azure Security Engineer Associate, Tenable, or CyberArk are beneficial

About you
- Strong analytical, planning, and organisational skills
- Ability to communicate technical issues clearly to non-technical stakeholders
- Hands-on, proactive, and collaborative approach to security engineering
- Commitment to continuous improvement and operational excellence

Qualifications
- Degree in Cyber Security, Computer Science, Information Technology, Engineering, or a related field
- Industry certifications such as CISSP, CCSP, CompTIA Security+, or SC-200