Cyber Security Threat Hunter
Cyber Security Threat Hunter - Remote
Our client is urgently looking for an experienced Cyber Security Threat Hunter to join their team on a permanent basis.
Please note, the role is 100% remote, but a hybrid/on-site working arrangement can be made if you prefer this.
You will be well versed in Threat Hunting within the Cyber Security arena, including Ethical Hacking (CEH is advantageous).
You will be rewarded with an excellent salary, as well as a brilliant benefits package including bonus (up to 15%), remote working, private healthcare, medicash, income protection, death in service x4 salary, cycle to work scheme and many, many more perks!
Cyber Security Threat Hunter - Key Skills:
- Incident response processes/methodologies and SIEM operations
- Security tooling, reporting, and delivering work in a structured/project-based way
- IT/networking/security fundamentals including operating systems, networking and digital forensics
- Microsoft Azure and Microsoft 365 cloud technologies
- Threat intelligence-driven hunting: Demonstrated use of threat intelligence to plan hunts, enrich detections, and block malicious infrastructure
- Windows and identity fundamentals: Strong understanding of Windows security concepts and Microsoft identity (Active Directory and Entra ID), including authentication and token flows (Kerberos/NTLM/OAuth), device join states, MFA/Conditional Access concepts, and common identity attack paths
- Endpoint telemetry literacy: Ability to interpret process trees and command lines, PowerShell activity, scheduled tasks/services, registry and file changes, WMI usage, persistence techniques, and LOLBins and to connect these artifacts to Defender alerts and timelines
- Microsoft 365 and cloud security foundations: Familiarity with email security and message flow (Exchange Online), and investigation pivots across SharePoint/OneDrive/Teams activity and Azure logs where relevant to XDR incidents
- Detection engineering mindset: Experience translating hunts and red team findings into practical detections and improvements (signal selection, tuning, suppression/thresholding, entity mapping, documentation, and operational handoff)
- KQL depth and query performance: Comfortable using joins/unions, parsing, time-windowing, summarisation, Essential baselining, and performance-aware query patterns for large datasets
Cyber Security Threat Hunter - Remote
Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted.
Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation
We take our obligations to protect your personal data very seriously. Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website