Senior SOC Threat Hunter & Automation Specialist

DGH Recruitment Limited; Holbeck; On-site; GBP 77,000 - 104,000; Full time

Job summary

DGH Recruitment Limited, Leeds-based, seeks a Senior Security Operations Analyst to join a security operations center focused on detection, threat hunting, automation, and incident response for client environments.

You will monitor, investigate, and triage alerts across cloud, network, and endpoints, work with the automation team to tune detections, and provide Tier 1 and Tier 2 support for email gateways, proxies and related security controls.

Qualifications

• 5+ years in Security Operations/SOC or Incident Response.
• Experience across IR, alert triage, threat hunting, DLP, and risk analysis.
• Experience with at least one major SIEM and EDR; hands-on KQL/SPL, PowerShell or Python preferred.
• Experience with Security Orchestration and Automation (SOAR).
• Certifications such as SC-200, AZ-500, GCIA, GCIH, GCDA, CISSP or CISM preferred.

Responsibilities

• Monitor, investigate, and triage security alerts, anomalies, indicators of compromise, and policy violations.
• Participate in continuous threat hunting activities, leveraging threat intelligence and proactive analysis to identify threats and trends.
• Work with the Detection and Automation team to support development of detection alerts, automation, and tuning to reduce false positives.
• Provide Tier 1 triage of secure email gateway alerts and phishing incidents, escalating threats per procedures.
• Provide Tier 2 operational support for web proxy and secure web gateway technologies, troubleshooting and corrective actions.

Skills

Incident response

Threat hunting

Security operations

Operational risk analysis

Data loss prevention

Education

SC-200

AZ-500

GCIA

GCIH

GCDA

CISSP

CISM

Tools

SIEM platform

EDR platform

PowerShell

Python

KQL

SPL

SOAR

Job description

DGH Recruitment Limited, Leeds-based, seeks a Senior Security Operations Analyst to join a security operations center focused on detection, threat hunting, automation, and incident response for client environments.

You will monitor, investigate, and triage alerts across cloud, network, and endpoints, work with the automation team to tune detections, and provide Tier 1 and Tier 2 support for email gateways, proxies and related security controls.