Senior Cyber Threat Detection and Response Analyst

weServed; Portsmouth; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Generous holiday allowance

Pension with life assurance

Digital GP and health checks

Job summary

Babcock International is seeking a Senior Cyber Threat Detection and Response Analyst to lead cyber security investigations and drive proactive threat hunting within a hybrid UK-based position.

You will work across Threat Intelligence, Security Assurance, and IT Operations to strengthen cyber resilience while shaping our security operations strategy and defending critical business operations.

Qualifications

• Significant experience in Cyber Security Operations or Incident Response.
• Experience investigating and managing complex cyber security incidents.
• Strong knowledge of SIEM/EDR and Threat Detection solutions.
• Understanding attacker TTPs and MITRE ATT&CK framework.

Responsibilities

• Lead complex cyber security investigations and incident response activities.
• Conduct proactive threat hunting to identify threats and vulnerabilities.
• Analyse logs, alerts and telemetry to detect malicious activity.
• Collaborate with Threat Intelligence, Security Assurance, Vulnerability Management and IT Operations teams.
• Drive continuous improvement of detection and response capabilities.

Skills

Cyber Security Ops

Incident Response

Threat Detection

MITRE ATT&CK

Education

Cyber security qualifications

Tools

SIEM

EDR

Job description

Job Title: Senior Cyber Threat Detection and Response Analyst

Location: Any of our main UK locations+ Hybrid Working Arrangements

Compensation: Competitive + Benefits

Role Type: Full time / Permanent

Role ID: SF75113

At Babcock we’re working to create a safe and secure world, together, and if you join us, you can play your part as a Senior Cyber Threat Detection and Response Analyst at any of our main UK locations.

The role

As a Senior Cyber Threat Detection and Response Analyst, you’ll be a technical leader within our Cyber Security Operations capability, driving advanced threat detection, cyber defence, incident response and proactive threat hunting activities. You'll play a vital role in identifying, investigating and responding to complex cyber security threats while helping to shape and continuously improve our security operations capability.

Day-to-day, you’ll have an exciting opportunity to work with leading cyber technologies, collaborate with specialist teams across the organisation, and influence the future direction of our cyber defence strategy. Your expertise will directly contribute to protecting critical business operations while supporting your own professional development within a highly skilled and forward-thinking team.

• Leading complex cyber security investigations and incident response activities.
• Conducting proactive threat hunting to identify emerging threats and vulnerabilities.
• Analysing security alerts, logs and telemetry data to detect malicious activity.
• Collaborating with Threat Intelligence, Security Assurance, Vulnerability Management and IT Operations teams to strengthen cyber resilience.
• Driving continuous improvement of detection capabilities, response processes and cyber defence strategies.

This role is full time, 37.5 hours per week and provides hybrid working arrangements.

Essential experience of the Senior Cyber Threat Detection and Response Analyst

• Significant experience within Cyber Security Operations, Incident Response or Threat Detection environments.
• Demonstrable experience investigating and managing complex cyber security incidents.
• Strong knowledge of Security Information and Event Management platforms, Endpoint Detection and Response technologies, and Threat Detection and Response solutions.
• Experience analysing logs, alerts, security telemetry and security incident data.
• Strong understanding of attacker tactics, techniques and procedures, including the MITRE ATT&CK framework.

Qualifications for the Senior Cyber Threat Detection and Response Analyst

Essential:

• Relevant cyber security experience supported by industry-recognised cyber security qualifications.

Desirable:

• GIAC Certified Intrusion Analyst (GCIA)
• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Forensic Analyst (GCFA)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Microsoft Security Operations Analyst (SC-200)
• GIAC Certified Enterprise Defender (GCED)
• CREST Practitioner qualifications

Security Clearance

The successful candidate must be a sole UK national who is able to achieve and maintain Developed Vetting (DV) security clearance for this role.

Many of the positions within our company are subject to national security clearance and Trade Control restrictions. This means that your eligibility for certain roles may be affected by your place of birth, nationality, current or former citizenship, and any residency you hold or have held. Further details are available at United Kingdom Security Vetting: clearance levels - GOV.UK (www.gov.uk)

What we offer

• Generous holiday allowance
• Matched contribution pension scheme, with life assurance
• Access to a Digital GP, annual health check, and nutritional consultations through Aviva DigiCare+
• Employee share scheme
• Employee shopping savings portal
• Payment of Professional Fees
• Reservists in the armed forces receive 10-days special paid leave
• Holiday Trading is a benefit that allows UK Babcock employees to buy additional leave or to sell up to one working week of annual leave from their annual entitlement. There is an annual Window to request this benefit. ‘Be Kind Day’ enables employees to take one working day's paid leave a year (or equivalent hours) to undertake volunteering work with their chosen organisation or registered charity
• Excellent development opportunities and benefits package including an employee assistance programme supporting physical, mental and financial wellbeing.

Babcock International

For over a century Babcock has helped to defend nations, protect communities and build a better world. To continue, we must adapt, advance and be a sustainable business with a shared goal.

We are a disability confident, committed employer. If you have a disability or need any reasonable adjustments during the application and selection stages, please email [e-mail] with the subject header ‘Reasonable adjustments requirement’. We’re committed to building an inclusive culture where everyone’s free to thrive. We are happy to talk about flexible working – please ask about alternative patterns of work at interview.

Closing date: 25/09/2026

#BABDESTNUC