Threat Hunting & Detection Analyst

Accenture; Greater London; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

Accenture in the UK is seeking a Threat Hunting & Detection Analyst to join our SOC team in Cheltenham on a hybrid basis, attending the office once a month. The role combines hands-on detection work with collaboration across threat intelligence and engineering to tailor content to client environments.

You will develop and tune threat detection use cases, conduct proactive hunts, and maintain runbooks, while growing in a supportive, learning-focused team culture.

Qualifications

• Experience with SIEM platforms such as Microsoft Sentinel and Splunk.
• Background in SOC, Threat Hunting, Detection Engineering or Cyber Security Operations.
• Experience developing, testing, and tuning threat detection use cases.
• Knowledge of MITRE ATT&CK and common TTPs.

Responsibilities

• Design and implement detection logic aligned to threat scenarios using MITRE ATT&CK.
• Develop, test, deploy, and tune detection content throughout its lifecycle.
• Collaborate with Client Lead Analysts to keep content relevant for client environments.
• Conduct proactive threat hunts using client telemetry and threat intel.
• Document findings in actionable formats for internal teams and clients.
• Maintain runbooks and detection playbooks to reflect evolving threats.

Skills

Threat Hunting

Detection Engineering

SOC Operations

MITRE ATT&CK

SIEM

EDR tooling

Communication

Tools

Microsoft Sentinel

Splunk

CrowdStrike

Defender for Endpoint

Job description

Job Description

Role: Threat Hunting & Detection Analyst

Location: Cheltenham (hybrid- 1x a month office attendance)

Position: Specialist / Senior Analyst

Please Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance which requires 5 years continuous UK address history (typically including no periods of 30 consecutive days or more spent outside of the UK) and declaration of being a British passport holder with no dual nationalism at the point of application. Note: The above information relates to a specific client requirement.

About the team:

As a member of the SOC Content Team, you will be responsible for contributing to the creation, deployment, and tuning of threat detection content and delivery of proactive threat hunting. You will work in close partnership with client Lead Analysts, threat intelligence teams, and other SOC functions to help ensure that detection strategies are tailored to each client's threat profile and security objectives.

This role offers a balance of technical hands-on work, collaboration, and knowledge sharing, with a strong emphasis on continual learning and process improvement.

Career Level & Experience

We recognise that strong cyber security professionals may come from a variety of backgrounds and may not have experience across every area listed in this role profile.

We are open to considering candidates atdifferent stagesof their careers, from developing practitioners through to experienced specialists. Candidates with strengths inThreat Hunting,Detection Engineering,SOC Operations, orSecurity Monitoring & Incident Responseare encouraged to apply.

You do not need to meet every requirement listed below. If you have strong experience in one or more of these areas and are keen to develop yourexpertiseacross the wider detection and threat hunting lifecycle, wewouldwelcome your application. The level and responsibilities of the role will be aligned to your skills, experience, and potential.

Qualification

Key Responsibilities:

Threat Detection Use Case Development

• Design and implement detection logic aligned to specific threat scenarios using frameworks such as MITRE ATT&CK.
• Develop, test, deploy, and tune detection content throughout its lifecycle.
• Work closely with Client Lead Analysts to ensure detection contentremainsrelevant and effective for client environments.

Proactive Threat Hunting

• Conduct hypothesis-driven threat hunts using client telemetry, threat intelligence, and observed anomalies.
• Analyse available data sources toidentifysuspicious or malicious activity that may evade existing detections.
• Document and present findings in a clear, actionable format for both internal teams and clients.

Content QA and Maintenance

• Review andvalidatedetection content prior to deployment.
• Maintain and update runbooks, SOPs, and detection playbooks to reflect evolving threats, tooling, and client requirements.
• Support quality assurance activities to ensure consistency, accuracy, and effectiveness of delivered content.

Collaboration & Knowledge Sharing

• Collaborate with SOC, Threat Intelligence, and Engineering teams to enhance detection strategies.
• Share findings, insights, and best practices through documentation, workshops, and knowledge-sharing sessions.
• Contribute to continuous improvement initiatives across the wider security operations function.

Skills & Experience:

• Experience with SIEM platforms such as Microsoft Sentinel, Splunketc
• Previousexperience working in a SOC, Threat Hunting, Detection Engineering, or Cyber Security Operations environment.
• Experience developing, testing, and tuning threat detection use cases.
• Good understanding of the MITRE ATT&CK framework and common threat actor tactics, techniques, and procedures (TTPs).
• Experience conducting proactive threat hunting and analysing security telemetry.
• Strong analytical, investigation, and communication skills.
• Ability to collaborate effectively with SOC analysts, threat intelligence teams, and other security stakeholders.
• Experience in EDR tooling such as CrowdStrike & Microsoft Defender-desirable.

Locations

London

Additional Information

Equal Employment Opportunity Statement

All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.

Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process.

Accenture is committed to providing veteran employment opportunities to our service men and women.

Please read Accenture's Recruiting and Hiring Statement for more information on how we process your data during the Recruiting and Hiring process.

About Accenture

We work with one shared purpose: to deliver on the promise of technology and human ingenuity. Every day, more than 775,000 of us help our stakeholders continuously reinvent. Together, we drive positive change and deliver value to our clients, partners, shareholders, communities, and each other.

We believe that delivering value requires innovation, and innovation thrives in an inclusive and diverse environment. We actively foster a workplace free from bias, where everyone feels a sense of belonging and is respected and empowered to do their best work.

At Accenture, we see well-being holistically, supporting our people’s physical, mental, and financial health. We also provide opportunities to keep skills relevant through certifications, learning, and diverse work experiences. We’re proud to be consistently recognized as one of the World's Best Workplaces™.

Join Accenture to work at the heart of change. Visit us at www.accenture.com .