At a Glance
- Tasks: Hunt for cyber threats and analyse adversary behaviour in a dynamic environment.
- Company: Join a leading cyber defence team in Wokingham, Berkshire.
- Benefits: Competitive salary, excellent benefits, and ongoing training opportunities.
- Other info: Ideal for those looking to deepen their expertise in a collaborative setting.
- Why this job: Make a real impact by proactively detecting and responding to cyber threats.
- Qualifications: Experience in threat hunting and strong knowledge of SIEM platforms required.
The predicted salary is between 75000 - 75000 £ per year.
Location: Wokingham, Berkshire (On-site)
Salary: Competitive (dependent on experience) + excellent benefits & training
Security Clearance: Ideally SC Cleared or eligible for SC
Role Overview
As a Cyber Threat Detection Analyst, you will play a hands-on role within an advanced cyber defence function, focused on proactive threat hunting, adversary behaviour analysis, and high-fidelity threat detection across enterprise environments. This role goes beyond reactive alert handling. You will actively hunt for malicious activity using telemetry, SIEM data, and threat intelligence, develop hypotheses based on MITRE ATT&CK Tactics, Techniques, and Procedures (TTPs), and support incident management and response activities when threats are identified. We are open to experienced SOC Analysts where threat hunting, investigations, and proactive detection have formed a significant part of their role, and who are looking to further develop in a more hunting-led environment. This position is well suited to analysts who enjoy thinking like an attacker, have worked alongside or supported red team or purple team activities, and want to deepen their expertise in threat detection and detection engineering.
Skills & Experience We're Seeking
- Experience in threat hunting, cyber threat detection, SOC, blue team, or cyber defence environments, with ideally around five years hands on experience.
- Strong hands-on experience using SIEM platforms, including:
- Microsoft Sentinel (KQL)
- Splunk (SPL)
- Elastic Security/Kibana (KQL, ESQL)
- Practical and operational understanding of MITRE ATT&CK, attacker techniques, and adversary tradecraft
- Experience working with Indicators of Compromise (IOCs) and threat intelligence feeds
- Solid experience across the security event life cycle, including detection, investigation, and incident management
- Hands-on experience with EDR/XDR technologies such as Microsoft Defender, CrowdStrike, SentinelOne, or Carbon Black
- Strong knowledge of networking fundamentals (TCP/IP, DNS, HTTP/S, Firewalls, VPNs, Proxy technologies)
- Experience analysing telemetry from Windows, Linux, identity, endpoint, and network sources
- Strong analytical mindset with the ability to clearly communicate findings, impact, and risk
Key Responsibilities
- Conduct proactive threat hunting activities across log, endpoint, and network telemetry to identify suspicious, stealthy, or previously unknown threats
- Develop and execute hunt hypotheses aligned to MITRE ATT&CK TTPs, adversary behaviours, and emerging threat intelligence
- Write, refine, and optimise SIEM queries using KQL, SPL, Elastic/ESQL, and Kibana Query Language
- Perform IOC analysis, enrichment, and validation, integrating internal and external threat intelligence sources
- Lead investigations from initial detection through scoping, root cause analysis, and impact assessment
- Support incident management and incident response activities, including containment, remediation, escalation, and lessons learned
- Collaborate closely with SOC teams, incident responders, red teams, and purple teams to validate detections and improve defensive coverage
- Contribute to detection logic improvements, use-case development, and continuous enhancement of hunting methodologies
- Produce clear investigation write-ups, timelines, and recommendations for technical and non-technical stakeholders
Security Certifications (Highly Beneficial)
- SANS/GIAC certifications, including but not limited to:
- GCIH - Incident Handler
- GCIA - Intrusion Analyst
- GCED - Enterprise Defender
- GCTI - Cyber Threat Intelligence
- GMON - Continuous Monitoring
- GDAT - Defending Advanced Threats
- GCAT - Advanced Threat Intelligence
- OSCP or equivalent offensive security qualifications
- Crest certifications, such as:
- Crest Practitioner Intrusion Analyst (CPIA)
- Crest Registered Intrusion Analyst (CRIA)
- Crest Certified Threat Intelligence Analyst (CCTIA)
- Crest Certified Blue Team Professional (CCBTP)
- Microsoft SC-200 or related detection and response certifications
- Other recognised cyber security or threat intelligence credentials
Cyber Threat Detection / SIEM Analyst - SANS/GIAC in Wokingham employer: Adecco
As a Cyber Threat Detection / SIEM Analyst at our Wokingham location, you will join a dynamic team dedicated to proactive threat hunting and advanced cyber defence. We pride ourselves on fostering a collaborative work culture that encourages continuous learning and professional growth, offering excellent benefits and training opportunities to enhance your skills in a cutting-edge environment. With a focus on innovation and teamwork, we provide a unique platform for you to deepen your expertise while making a meaningful impact in the field of cybersecurity.
StudySmarter Expert Advice🤫
We think this is how you could land Cyber Threat Detection / SIEM Analyst - SANS/GIAC in Wokingham
✨Tip Number 1
Network like a pro! Attend industry meetups, webinars, or conferences related to cyber security. Chatting with professionals in the field can lead to job opportunities that aren’t even advertised yet.
✨Tip Number 2
Show off your skills! Create a portfolio showcasing your threat hunting projects or any relevant work. This gives potential employers a taste of what you can do and sets you apart from the crowd.
✨Tip Number 3
Don’t just apply; engage! When you find a job on our website, tailor your approach. Reach out to current employees on LinkedIn, ask about their experiences, and express your enthusiasm for the role.
✨Tip Number 4
Prepare for interviews by practising common questions related to threat detection and incident response. Use real-world scenarios to demonstrate your analytical mindset and problem-solving skills.
We think you need these skills to ace Cyber Threat Detection / SIEM Analyst - SANS/GIAC in Wokingham
Some tips for your application 🫡
Tailor Your CV:Make sure your CV is tailored to the Cyber Threat Detection Analyst role. Highlight your experience with SIEM platforms and threat hunting, and don’t forget to mention any relevant certifications like SANS/GIAC. We want to see how your skills match what we're looking for!
Craft a Compelling Cover Letter:Your cover letter is your chance to shine! Use it to explain why you're passionate about cyber defence and how your background makes you a great fit for our team. We love seeing enthusiasm and a bit of personality in applications.
Showcase Your Analytical Skills:In your application, be sure to showcase your analytical mindset. Provide examples of how you've tackled complex problems or conducted investigations in previous roles. We’re keen on candidates who can think like an attacker and communicate their findings clearly.
Apply Through Our Website:We encourage you to apply through our website for a smoother process. It helps us keep track of your application and ensures you get all the updates. Plus, it’s super easy to do!
How to prepare for a job interview at Adecco
✨Know Your MITRE ATT&CK
Make sure you brush up on the MITRE ATT&CK framework before your interview. Be ready to discuss how you've applied it in your previous roles, especially in threat hunting and detection. This shows that you not only understand the theory but can also implement it practically.
✨Show Off Your SIEM Skills
Since this role heavily involves SIEM platforms, be prepared to talk about your hands-on experience with tools like Microsoft Sentinel or Splunk. Bring examples of specific queries you've written or challenges you've faced while using these tools, as this will demonstrate your technical prowess.
✨Communicate Clearly
As a Cyber Threat Detection Analyst, you'll need to convey complex findings to both technical and non-technical stakeholders. Practice explaining your past investigations and findings in a clear, concise manner. This will highlight your analytical mindset and communication skills, which are crucial for the role.
✨Prepare for Scenario Questions
Expect scenario-based questions where you might need to outline your approach to a hypothetical threat detection situation. Think through your process for threat hunting, incident response, and collaboration with teams. This will showcase your problem-solving abilities and how you think like an attacker.
