On-site Threat Hunter & SIEM Detection Analyst

Cyber UK; Wokingham; On-site; GBP 45,000 - 70,000; Full time

Benefits offered by this job

Excellent benefits and training

Job summary

Cyber UK in Wokingham is seeking a Cyber Threat Detection Analyst to engage in proactive threat hunting and high-fidelity threat detection. This role requires hands-on experience with SIEM platforms to analyze and hunt for malicious activity. The ideal candidate will have around five years of experience in cyber defence environments, operational understanding of MITRE ATT&CK, and be able to collaborate efficiently with various teams. Security certifications like SANS/GIAC are highly beneficial.

Qualifications

• Around five years of hands-on experience in cyber defence or SOC environments.
• Strong hands-on experience using SIEM platforms.
• Operational understanding of MITRE ATT&CK and attacker techniques.

Responsibilities

• Conduct proactive threat hunting across telemetry.
• Develop hypotheses aligned to MITRE ATT&CK.
• Write and optimise SIEM queries.
• Lead investigations from detection to impact assessment.
• Support incident management and response activities.

Skills

Threat hunting

Cyber threat detection

SIEM platforms experience (Microsoft Sentinel, Splunk, Elastic Security)

Understanding of MITRE ATT&CK

Experience with IOCs and threat intelligence

Knowledge of networking fundamentals

Experience with EDR/XDR technologies

Analytical mindset

Education

SANS/GIAC certifications

OSCP or equivalent

Tools

Microsoft Sentinel

Splunk

Elastic Security/Kibana

Microsoft Defender

CrowdStrike

Job description

Cyber UK in Wokingham is seeking a Cyber Threat Detection Analyst to engage in proactive threat hunting and high-fidelity threat detection. This role requires hands-on experience with SIEM platforms to analyze and hunt for malicious activity. The ideal candidate will have around five years of experience in cyber defence environments, operational understanding of MITRE ATT&CK, and be able to collaborate efficiently with various teams. Security certifications like SANS/GIAC are highly beneficial.