Threat Hunter & Incident Response Lead - Active Defence

Cyber UK; United Kingdom; Remote; GBP 70,000 - 100,000; Full time

Job summary

Cyber UK is seeking a Cyber Threat Operations specialist to support the Active Defence Incident Response Team within Digital Excellence. You will assist in countering cyber threats, provide threat hunting and detection engineering, and work within a high-performing UK team.

The role involves collaboration with the UK SOC, InfoSec teams, and infrastructure domains to monitor, analyse and respond to security events across the UK network perimeter.

Qualifications

• Background in cyber security with emphasis on threat hunting and incident response.
• Experience with SIEM, network monitoring and security analytics.
• Familiarity with threat intelligence and behavioural analytics.
• Understanding of OSI model and common protocols.
• Good communication with business and suppliers.

Responsibilities

• Support incident response manager in countering cyber threats.
• Conduct proactive threat hunting with CTI.
• Lead threat detection engineering efforts.
• Maintain security technologies and tools.
• Assist investigations and routine security meetings.
• Collaborate with UK SOC and InfoSec teams.

Skills

Threat Hunting

Incident Response

Security Monitoring

SIEM

Network Security

YARA

Sigma rules

OSI Model

Tools

SIEM tools

Packet capture

Threat detection

Anti-malware

Job description

Cyber UK is seeking a Cyber Threat Operations specialist to support the Active Defence Incident Response Team within Digital Excellence. You will assist in countering cyber threats, provide threat hunting and detection engineering, and work within a high-performing UK team.

The role involves collaboration with the UK SOC, InfoSec teams, and infrastructure domains to monitor, analyse and respond to security events across the UK network perimeter.