Enterprise Threat Detection - DV Cleared

CBSbutler Holdings Limited trading as CBSbutler; Reading; Sur place; GBP 120 000 - 129 000; Plein temps

Résumé du poste

CBSbutler Holdings Limited trading as CBSbutler is seeking an experienced Enterprise Threat Detection (ETD) Specialist to join a team operating in a highly secure environment in Reading. The role requires current DV clearance and hands-on expertise in enterprise threat detection, security monitoring and threat analysis to identify and mitigate cyber threats across a complex enterprise.

The successful candidate will apply knowledge of security operations, detection methodologies, SIEMs, and

Qualifications

• Experience in enterprise threat detection and security monitoring.
• Strong knowledge of threat detection methodologies and IoCs.
• Experience with SIEM technologies and log analysis.
• Ability to communicate security findings to technical and non-technical stakeholders.

Responsabilités

• Monitor and analyse enterprise environments for threats and anomalies.
• Develop and maintain enterprise threat detection capabilities and monitoring processes.
• Analyse alerts, logs and events to identify IoCs.
• Investigate and respond to security incidents with containment and recovery.
• Refine detection rules and use cases to improve coverage.
• Collaborate with SOC and cybersecurity stakeholders on threats.
• Conduct threat hunting to uncover previously unseen activity.
• Translate threat intel into actionable detections.
• Produce technical reports and recommendations for monitoring improvements.

Connaissances

Enterprise threat detection

Cyber threat analysis

Security operations

SIEM technologies

Threat hunting

Incident response

Communication of findings

Outils

SIEM

EDR

Threat intel

Network monitoring

Description du poste

Enterprise Threat Detection

• +6 months +
• +DV cleared - current active clearance is essential
• +On site in Reading
• +Inside IR35
• +£650 - £700 a day

We are seeking an experienced Enterprise Threat Detection (ETD) Specialist to join a team working within a highly secure environment in the Reading area.

This is an opportunity for a DV-cleared cybersecurity professional with experience in enterprise threat detection, security monitoring and threat analysis to support the identification, investigation and mitigation of cyber threats across a complex enterprise environment.

The successful candidate will have a strong understanding of security operations, threat detection methodologies and the tools and technologies used to identify suspicious activity, investigate potential compromises and strengthen an organisation's overall security posture.

Key Responsibilities

• Monitor and analyse enterprise environments to identify potential cyber threats, vulnerabilities and suspicious activity.
• Develop, implement and maintain enterprise threat detection capabilities and security monitoring processes.
• Analyse security alerts, logs and events to identify indicators of compromise (IoCs) and potential malicious activity.
• Investigate and respond to security incidents, supporting containment, remediation and recovery activities.
• Develop and refine detection rules, use cases and threat detection techniques to improve security coverage.
• Work with Security Operations Centre (SOC) teams and wider cybersecurity stakeholders to investigate emerging threats.
• Conduct threat hunting activities to identify previously undetected malicious activity.
• Analyse threat intelligence and translate findings into actionable detection capabilities.
• Produce technical reports, incident findings and recommendations for improving security monitoring.
• Support continuous improvement of enterprise security controls, detection processes and operational resilience.

Essential Skills & Experience

• Active DV Security Clearance.
• Proven experience in Enterprise Threat Detection, cyber threat analysis or security operations.
• Strong understanding of SIEM technologies, security monitoring and event correlation.
• Experience analysing security logs, alerts and network activity.
• Knowledge of threat detection methodologies, attack techniques and indicators of compromise.
• Experience developing or tuning detection rules and security use cases.
• Understanding of incident investigation and response processes.
• Strong analytical and problem-solving skills.
• Ability to communicate technical security findings to both technical and non-technical stakeholders.

Desirable Experience

• Experience working within UK Defence, Government or other highly secure environments.
• Familiarity with MITRE ATT&CK and threat intelligence frameworks.
• Experience with enterprise security monitoring platforms and EDR technologies.
• Knowledge of network security, endpoint monitoring and cloud threat detection.