Threat Hunting & Detection Engineering Analyst in Cheltenham

Energy Jobline ZR; Cheltenham; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Private medical insurance

Generous annual leave

Technical training and career growth

Job summary

Energy Jobline ZR is seeking a Threat Hunting & Detection Engineering Analyst in the UK on a hybrid basis. You will design and optimise threat detection capabilities, hunt for threats, and work with SOC teams to enhance client security postures.

The role focuses on creating detection use cases, tuning logic, and producing clear guidance for stakeholders, with opportunities for ongoing training and career progression within a leading technology consultancy.

Qualifications

• Experience in threat detection and SOC operations or cyber defence.
• Ability to design, develop and optimise threat detection use cases.
• Proficient in building and tuning detection logic using MITRE ATT&CK.

Responsibilities

• Design, develop and maintain threat detection use cases aligned to real-world attack scenarios.
• Build and tune detection logic using MITRE ATT&CK framework.
• Conduct proactive threat hunting across client environments.
• Analyse telemetry and threat intel to identify suspicious activity.
• Develop, test and optimise detection content throughout its lifecycle.
• Produce technical documentation, reports and recommendations.
• Maintain playbooks and operational documentation.
• Collaborate with SOC teams and client stakeholders to improve coverage.
• Share knowledge and contribute to continuous improvement initiatives.

Skills

Threat Hunting

Detection Engineering

SOC

SIEM

MITRE ATT&CK

Threat Intelligence

Detection content

Telemetry analysis

Incident detection

Playbooks

Security tooling

Stakeholder comms

Tools

SIEM technologies

Job description

Job DescriptionThreat Hunting & Detection Engineering Analyst Location: UK (Hybrid)Salary: Competitive + Excellent BenefitsThreat Hunting & Detection Engineering Analyst A leading global technology consultancy is looking to hire a Threat Hunting & Detection Engineering Analyst to join its growing Cyber Security practice.This is an exciting opportunity to work at the forefront of cyber defence, helping enterprise clients improve their detection capabilities through advanced threat hunting, detection engineering and SOC content development. Working alongside Threat Intelligence teams, Security Operations Centres and client stakeholders, you'll play a key role in strengthening organisations' ability to identify and respond to emerging cyber threats.

The Role

As a Threat Hunting & Detection Engineering Analyst, you'll be responsible for designing, developing and optimising threat detection capabilities while proactively hunting for malicious activity across complex enterprise environments. You'll work with a collaborative team of cyber specialists, contributing to innovative detection strategies that help clients stay ahead of evolving threats.

Key Responsibilities

• Design, develop and maintain threat detection use cases aligned to real-world attack scenarios
• Build and tune detection logic using industry frameworks such as MITRE ATT&CK
• Conduct proactive, hypothesis-led threat hunting across client environments
• Analyse telemetry, threat intelligence and security data to identify suspicious activity
• Develop, test and optimise detection content throughout its lifecycle
• Produce clear technical documentation, reports and recommendations
• Maintain detection playbooks, SOPs and operational documentation
• Collaborate with SOC teams, Threat Intelligence specialists and client stakeholders to continuously improve detection coverage
• Share technical knowledge and contribute to continuous improvement initiatives across the wider security function

About You

We're looking for security professionals with experience in threat detection, SOC operations or cyber defence who are passionate about identifying sophisticated threats and improving security operations.

• Threat Hunting
• Detection Engineering
• Security Operations Centres (SOC)
• SIEM technologies
• MITRE ATT&CK Framework
• Threat Intelligence
• Detection rule creation and tuning
• Security telemetry analysis
• Incident detection and investigation
• Writing detection use cases and playbooks
• Developing and maintaining security content
• Working with enterprise security tooling
• Strong stakeholder communication and collaboration skills

What's on Offer

You'll join one of the world's largest technology and consulting organisations, working alongside industry-leading cyber security experts on high-profile transformation programmes. You'll benefit from ongoing technical training, exposure to cutting-edge security technologies and clear opportunities for career progression within a globally recognised cyber practice. The package includes a competitive salary, comprehensive benefits, private medical insurance, generous annual leave and opportunities to work with clients across a wide range of industries.

TPBN1_UKTJ