At a Glance
- Tasks: Hunt for cyber threats and analyse adversary behaviour in a dynamic environment.
- Company: Join a leading cyber defence team in Wokingham, Berkshire.
- Benefits: Competitive salary, excellent benefits, and comprehensive training opportunities.
- Other info: Ideal for those passionate about cybersecurity and eager to grow their skills.
- Why this job: Make a real impact by proactively defending against cyber threats.
- Qualifications: Experience in threat hunting and strong knowledge of SIEM platforms required.
The predicted salary is between 50000 - 60000 £ per year.
Location: Wokingham, Berkshire (On-site)
Salary: Competitive (dependent on experience) + excellent benefits & training
Security Clearance: Ideally SC Cleared or eligible for SC
Role Overview
As a Cyber Threat Detection Analyst, you will play a hands-on role within an advanced cyber defence function, focused on proactive threat hunting, adversary behaviour analysis, and high-fidelity threat detection across enterprise environments. This role goes beyond reactive alert handling. You will actively hunt for malicious activity using telemetry, SIEM data, and threat intelligence, develop hypotheses based on MITRE ATT&CK Tactics, Techniques, and Procedures (TTPs), and support incident management and response activities when threats are identified. We are open to experienced SOC Analysts where threat hunting, investigations, and proactive detection have formed a significant part of their role, and who are looking to further develop in a more hunting-led environment. This position is well suited to analysts who enjoy thinking like an attacker, have worked alongside or supported red team or purple team activities, and want to deepen their expertise in threat detection and detection engineering.
Skills & Experience We're Seeking
- Experience in threat hunting, cyber threat detection, SOC, blue team, or cyber defence environments, with ideally around five years hands-on experience.
- Strong hands-on experience using SIEM platforms, including: Microsoft Sentinel (KQL), Splunk (SPL), Elastic Security/Kibana (KQL, ESQL).
- Practical and operational understanding of MITRE ATT&CK, attacker techniques, and adversary tradecraft.
- Experience working with Indicators of Compromise (IOCs) and threat intelligence feeds.
- Solid experience across the security event life cycle, including detection, investigation, and incident management.
- Hands-on experience with EDR/XDR technologies such as Microsoft Defender, CrowdStrike, SentinelOne, or Carbon Black.
- Strong knowledge of networking fundamentals (TCP/IP, DNS, HTTP/S, Firewalls, VPNs, Proxy technologies).
- Experience analysing telemetry from Windows, Linux, identity, endpoint, and network sources.
- Strong analytical mindset with the ability to clearly communicate findings, impact, and risk.
Key Responsibilities
- Conduct proactive threat hunting activities across log, endpoint, and network telemetry to identify suspicious, stealthy, or previously unknown threats.
- Develop and execute hunt hypotheses aligned to MITRE ATT&CK TTPs, adversary behaviours, and emerging threat intelligence.
- Write, refine, and optimise SIEM queries using KQL, SPL, Elastic/ESQL, and Kibana Query Language.
- Perform IOC analysis, enrichment, and validation, integrating internal and external threat intelligence sources.
- Lead investigations from initial detection through scoping, root cause analysis, and impact assessment.
- Support incident management and incident response activities, including containment, remediation, escalation, and lessons learned.
- Collaborate closely with SOC teams, incident responders, red teams, and purple teams to validate detections and improve defensive coverage.
- Contribute to detection logic improvements, use-case development, and continuous enhancement of hunting methodologies.
- Produce clear investigation write-ups, timelines, and recommendations for technical and non-technical stakeholders.
Security Certifications (Highly Beneficial)
- SANS/GIAC certifications, including but not limited to: GCIH - Incident Handler, GCIA - Intrusion Analyst, GCED - Enterprise Defender, GCTI - Cyber Threat Intelligence, GMON - Continuous Monitoring, GDAT - Defending Advanced Threats, GCAT - Advanced Threat Intelligence.
- OSCP or equivalent offensive security qualifications.
- Crest certifications, such as: Crest Practitioner Intrusion Analyst (CPIA), Crest Registered Intrusion Analyst (CRIA), Crest Certified Threat Intelligence Analyst (CCTIA), Crest Certified Blue Team Professional (CCBTP).
- Microsoft SC-200 or related detection and response certifications.
- Other recognised cyber security or threat intelligence credentials.
SOC / Cyber Threat Detection Analyst - SANS/GIAC in Wokingham employer: Adecco
As a leading employer in the cybersecurity sector, we offer a dynamic work environment in Wokingham, Berkshire, where innovation and collaboration thrive. Our commitment to employee growth is evident through extensive training opportunities, including support for SANS/GIAC certifications, and a culture that encourages proactive threat hunting and continuous learning. With competitive salaries and excellent benefits, we empower our analysts to think like attackers and develop their skills in a cutting-edge cyber defence function.
StudySmarter Expert Advice🤫
We think this is how you could land SOC / Cyber Threat Detection Analyst - SANS/GIAC in Wokingham
✨Tip Number 1
Network like a pro! Attend industry meetups, webinars, or conferences related to cyber security. It's a great way to meet potential employers and fellow analysts who can share job leads or insider info about openings.
✨Tip Number 2
Show off your skills! Create a portfolio showcasing your threat hunting projects, investigations, or any cool tools you've developed. This will give you an edge during interviews and demonstrate your hands-on experience.
✨Tip Number 3
Practice makes perfect! Brush up on your SIEM skills and MITRE ATT&CK knowledge. Use online labs or simulations to keep your skills sharp and be ready to tackle real-world scenarios in interviews.
✨Tip Number 4
Apply through our website! We’re always on the lookout for talented SOC Analysts. By applying directly, you’ll have a better chance of getting noticed by our hiring team and landing that dream job.
We think you need these skills to ace SOC / Cyber Threat Detection Analyst - SANS/GIAC in Wokingham
Some tips for your application 🫡
Tailor Your CV:Make sure your CV is tailored to the SOC / Cyber Threat Detection Analyst role. Highlight your experience with threat hunting, SIEM platforms, and any relevant certifications. We want to see how your skills match what we're looking for!
Showcase Your Experience:In your application, don’t just list your previous roles; explain how your hands-on experience aligns with our needs. Talk about specific projects or situations where you’ve used MITRE ATT&CK or conducted threat hunting. This helps us see your practical knowledge in action.
Be Clear and Concise:When writing your application, keep it clear and to the point. Use bullet points for key achievements and avoid jargon unless necessary. We appreciate straightforward communication, especially when it comes to complex topics like cyber threats.
Apply Through Our Website:We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered for the role. Plus, it shows you’re keen on joining our team at StudySmarter!
How to prepare for a job interview at Adecco
✨Know Your MITRE ATT&CK
Make sure you brush up on the MITRE ATT&CK framework before your interview. Be ready to discuss how you've applied it in your previous roles, especially in threat hunting and detection. This shows that you understand the tactics and techniques attackers use, which is crucial for the role.
✨Show Off Your SIEM Skills
Since experience with SIEM platforms is key, prepare to talk about your hands-on experience with tools like Microsoft Sentinel or Splunk. Bring examples of specific queries you've written or how you've used these tools to detect threats. This will demonstrate your practical knowledge and problem-solving skills.
✨Communicate Clearly
As a Cyber Threat Detection Analyst, you'll need to communicate findings effectively. Practice explaining complex technical concepts in simple terms. Think about how you would present your analysis to both technical and non-technical stakeholders, as this will be important in your role.
✨Prepare for Scenario-Based Questions
Expect scenario-based questions where you'll need to think like an attacker. Prepare to discuss how you would approach a specific threat or incident. This not only showcases your analytical mindset but also your ability to respond under pressure, which is vital in a SOC environment.
