Senior Security Operations Analyst - Remote Threat Hunter

DGH Recruitment Ltd.; Ouzlewell Green; Remote; GBP 65,000 - 90,000; Full time

Job summary

DGH Recruitment Limited is recruiting for a Senior Security Operations Analyst to join a leading professional services client in the UK on a remote basis. The role focuses on continuous monitoring, incident response, and proactive threat detection across networks, cloud and endpoints.

Key duties include triage of alerts, threat hunting, and collaboration with the Detection and Automation team to tune rules and reduce false positives, plus Tier 1/2 support for secure email, web gateway, and

Qualifications

• 5+ years in Security Operations/SOC or Incident Response, including 24x7 or global environments.
• Experience across incident response, alert triage, threat hunting, DLP, and risk analysis.
• Experience with at least one major SIEM and EDR; proficiency in KQL/SPL; PowerShell/Python preferred.
• Experience with Security Orchestration and Automation.
• Certifications such as SC-200, AZ-500, GCIA/GCIH/GCDA or CISSP/CISM preferred.

Responsibilities

• Monitor, investigate, and triage security alerts, anomalies, indicators of compromise, and policy violations.
• Participate in continuous threat hunting activities using threat intelligence to identify threats and trends.
• Support detection engineering for alert tuning and automation to reduce false positives.
• Provide Tier 1 triage of secure email gateway alerts and phishing incidents and escalate/remediate accordingly.
• Provide Tier 2 operational support for web proxy and secure web gateway technologies.

Skills

SOC/IR experience

Incident response

Threat hunting

Automation & SOAR

KQL/SPL scripting

PowerShell/Python

24x7/global environment

Tools

SIEM

EDR

KQL

SPL

PowerShell

Python

SOAR

Job description

DGH Recruitment Limited is recruiting for a Senior Security Operations Analyst to join a leading professional services client in the UK on a remote basis. The role focuses on continuous monitoring, incident response, and proactive threat detection across networks, cloud and endpoints.

Key duties include triage of alerts, threat hunting, and collaboration with the Detection and Automation team to tune rules and reduce false positives, plus Tier 1/2 support for secure email, web gateway, and