Cyber Security Threat Hunter – 11832SR

Overview

Permanent remote Cyber Security Threat Hunter role focused on proactive threat hunting and incident response. You will leverage threat intelligence, SIEM, and cloud security tools to detect and block threats, and translate findings into actionable detections. The role supports a cross-functional security team, enabling stronger protection across Azure/M365 environments. This is a chance to shape detection quality and response at scale in a flexible, benefits-rich setting.

Pay / Benefits

• Bonus up to 15%
• Remote working
• Private healthcare
• Medicash
• Income protection
• Death in service x4 salary

Responsibilities

• Lead threat hunting activities using threat intelligence to enrich detections
• Operate and monitor SIEM and security tooling in a structured, project-based manner
• Investigate incidents, interpret telemetry (endpoints, logs) and connect artifacts to Defender alerts
• Develop and tune detections based on hunts and red team findings
• Perform detection engineering: signal tuning, suppression/thresholding, and documentation for handoff
• Translate technical findings into practical security improvements and playbooks

Key requirements

• Experience in threat hunting within a cyber security context
• Knowledge of incident response processes and SIEM operations
• Strong IT/networking/security fundamentals (OS, networking, forensics)
• Familiarity with Windows security concepts, Active Directory and Entra ID
• Experience with endpoint telemetry, PowerShell, WMI, and persistence techniques
• Understanding of Microsoft 365, Exchange Online, SharePoint/OneDrive/Teams activity, and Azure logs
• Ability to use KQL for data analysis and large datasets
• Threat intelligence-driven hunting experience (planning hunts, enriching detections)

• Structured, project-based working style
• Analytical mindset and attention to detail
• Ability to translate complex findings into actionable guidance
• Threat hunting
• SIEM operations
• Threat intelligence

…