SC Cleared Cyber Security Specialist - Detection, Threat Hunting, L3
Job Description
\n
CONTRACTOR MUST BE SC CLEARED (active)
\n
Role Title: CyberSecurity Specialist
\n
Location: Bearwood Rd, Wokingham RG41 5BN | Hybrid - 50/50
\n
Duration: 25/12/2026
\n
MUST BE PAYE THROUGH UMBRELLA
\n
Role Description:
\n
Role Overview:
\n
- \n
- The Cyber Security Specialist will operate as an Embedded member of the THaDE team, providing advanced support across security monitoring, threat detection, and incident management. The role requires strong hands-on expertise in Security Information and Event Management (SIEM) platforms, with a focus on enhancing detection capabilities and proactively identifying threats.
\n\n
Key Responsibilities:
\n
\n\n
Detection Engineering:
\n
- \n
- Design, develop, and optimise security detections across both SIEM platforms
- Continuously improve detection rules to enhance coverage and reduce false positives
\n
\n\n
Threat Hunting:
\n
- \n
- Conduct proactive threat hunting activities across both SIEM environments
- Identify and investigate anomalous or malicious behaviour patterns
\n
\n\n
Level 3 Incident Management Support:
\n
- \n
- Provide advanced (L3) technical support to the Incident Management (IM) function
- Support investigation, containment, and resolution of complex security incidents
- Act as an escalation point for security-related issues within the IM process
\n
\n
\n\n
Key Skills and Experience:
\n
- \n
- Strong hands-on experience with enterprise SIEM platforms (multi-SIEM environments preferred)
- Proven capability in detection rule creation and tuning
- Demonstrated experience in proactive threat hunting methodologies
- Deep understanding of incident response processes and escalation handling (L3 support)
- Ability to work independently within an Embedded team model
\n
\n
\n
\n
\n