MSS SOC Threathunting

Randstad Technologies Recruitment; Greater London; Remote; GBP 10,000 - 40,000; Full time

Job summary

A leading recruitment agency is looking for a Remote SOC Threat Hunting Analyst for a 4-month contract. The role focuses on developing threat detection use cases, conducting proactive threat hunts, and collaborating with various teams to enhance detection strategies. Required skills include experience with threat detection logic and the ability to document findings effectively. This position requires active SC Clearance and promises engaging challenges in a dynamic environment.

Qualifications

• Experience in detecting and mitigating security threats using frameworks like MITRE ATT&CK.
• Familiarity with client telemetry analysis and threat intelligence tools.
• Ability to document findings clearly and effectively.

Responsibilities

• Design and implement detection logic for various threat scenarios.
• Conduct proactive threat hunting based on telemetry and threat intel.
• Participate in QA of detection content before deployment.
• Engage with SOC and other teams to refine detection strategies.

Skills

Threat detection logic

Threat intelligence analysis

Hypothesis-driven threat hunting

Collaboration

Job description

Job Title: SOC Threat hunting Analyst

Location: Remote

Duration: 04 months contract

Active SC Clearance required

Key Responsibilities

Threat Detection Use Case Development: Design and implement detection logic aligned to specific threat scenarios, using industry frameworks such as MITRE ATT&CK. Maintain detection content throughout its lifecycle - from development and testing to deployment and tuning. Work with client Lead Analysts to ensure content relevance and effectiveness in detecting threats across various environments.

Proactive Threat Hunting: Conduct hypothesis-driven threat hunts based on client telemetry, threat intelligence, and observed anomalies. Use available data sources and tools to identify suspicious or malicious activity that may bypass existing detections. Document and present findings in a clear and actionable format for both internal teams and clients.

Content QA and Maintenance: Participate in the review and validation of detection content prior to deployment. Assist in updating runbooks, SOPs, and detection playbooks to reflect changes in tools, threats, or client requirements. Support efforts to maintain consistency, accuracy, and quality in all delivered content.

Collaboration & Knowledge Sharing: Actively engage with the wider SOC, threat intelligence, and tooling teams to refine detection strategies. Share insights, findings, and improvements with team members through documentation, workshops, or informal sessions. Support cross-team initiatives and help drive a culture of continuous improvement and innovation.

If you're excited about this role then we would like to hear from you!

Please apply with a copy of your CV or send it to Prasanna . merugu @ randstaddigital . com and let's start the conversation!

Randstad Technologies is acting as an Employment Business in relation to this vacancy