Threat Hunting & Detection Analyst

Overview

In this role, you will lead advanced security investigations and act as an escalation point for high-severity incidents. You will guide L1 analysts, perform root-cause analysis, and coordinate containment and remediation with IT/OT stakeholders. You will help tune detection capabilities and contribute to playbooks and SOC exercises. This position sits within a 24/7 SOC team supporting a cutting-edge compute environment in London, with shift-based work and a dedicated allowance. You will make a tangible impact on security posture and incident response maturity.

Pay / Benefits

• shift allowance
• 24/7 shift coverage
• competitive salary and package
• opportunity to work on advanced compute platforms
• global professional services environment

Responsibilities

• Investigate escalated security incidents to determine attack vectors, scope, root cause, and potential business impact
• Correlate events across multiple data sources to build a comprehensive incident narrative
• Execute containment, eradication, and recovery activities in coordination with IT/OT stakeholders
• Lead response for medium to high-severity incidents and document detailed investigation reports
• Conduct tuning of detection rules and thresholds in collaboration with the Security Content Engineer
• Support continuous improvement by identifying gaps in detection coverage and playbooks
• Mentor and provide technical guidance to L1 Analysts
• Participate in periodic SOC exercises and simulated incident response drills
• Be part of 24/7 SOC Team, need to work in shifts

Key requirements

• Bachelor’s degree in Cybersecurity, Computer Science, or related field
• 3–5 years in SOC, Incident Response, or Threat Analysis roles
• Strong analytical mindset, in-depth knowledge of SIEM/EDR tools, malware behaviour, and incident handling methodologies

• SIEM/EDR tools
• malware behaviour
• incident handling methodologies
• GCIA
• GCIH
• CompTIA CySA+

…