At a Glance
- Tasks: Lead and design a cutting-edge threat hunting programme to enhance security outcomes.
- Company: Join a forward-thinking security firm dedicated to innovation and excellence.
- Benefits: Competitive salary, flexible working options, and opportunities for professional growth.
- Other info: Collaborative environment with strong focus on continuous learning and development.
- Why this job: Make a real impact in cybersecurity by shaping proactive threat hunting strategies.
- Qualifications: Experience in security analysis and a passion for threat intelligence.
The predicted salary is between 70000 - 90000 £ per year.
As the Threat Hunting & Intelligence Lead, you will be a senior security specialist responsible for designing, establishing, and leading an intelligence‑led threat hunting capability across the managed security service. This role combines hands‑on technical excellence, analyst development, and client‑facing leadership to deliver proactive security outcomes beyond traditional SOC alerting. You will reshape the threat hunting programme from the ground up, defining AI‑enabled methodologies, telemetry requirements, and measures of success before evolving into ongoing hunting execution, coaching analysts, and acting as a trusted advisor to clients and internal stakeholders. The role blends offensive attacker‑mindset insight with deep defensive detection and response expertise, making it a key differentiator for both service delivery and pre‑sales engagements.
Threat Hunting Programme Development
- Design and establish a formal, repeatable threat hunting programme, including:
- Hunting methodologies and frameworks
- Hypothesis‑driven hunting models
- Tooling, data sources, and telemetry requirements
- Clear success metrics and measurable outcomes
- Define and embed how threat hunting integrates with:
- SIEM detections and detection engineering
- SOC operations and workflows
- Incident response processes
- Intelligence‑led prioritisation and use‑case development
- Ensure hunting outputs directly inform continuous service improvement
Hands‑On Threat Hunting & Intelligence
- Conduct advanced, hands‑on threat hunts in the Microsoft Eco System primarily across:
- Endpoint (EDR/XDR)
- Identity and authentication telemetry
- Cloud platforms and SaaS environments
- SIEM and log‑based data sources
- Apply offensive security tradecraft (attacker TTPs, kill chains, evasion techniques) to uncover threats that bypass automated detections.
- Translate hunting and intelligence outcomes into:
- New or improved detection cases
- Automation opportunities
- SOC operational enhancements
- Detection coverage and fidelity improvements
- Maintain strong awareness of the current threat landscape, adversary behaviours, and emerging attack techniques.
Analyst Coaching & Capability Uplift
- Coach and mentor SOC analysts through collaborative hunting, developing:
- Threat‑led and adversary‑focused thinking
- Strong investigative depth and analytical reasoning
- Confidence in hypothesis‑driven analysis
- Lead hunts in a collaborative model, uplifting analyst capability rather than operating as a siloed expert.
- Embed a continuous learning culture where hunting outcomes directly improve detections, response playbooks, and analyst maturity.
- Act as a client‑facing authority for threat hunting and threat intelligence, able to:
- Explain hunting outcomes in clear, business‑relevant language
- Demonstrate how proactive hunting reduces risk beyond reactive alerting
- Articulate the value of intelligence‑led security operations
- Serve as a trusted advisor during service reviews, executive briefings, and strategic engagements.
Technical Leadership & Collaboration
- Demonstrate deep technical expertise across:
- SIEM platforms
- EDR/XDR technologies
- Cloud security platforms
- Identity and access telemetry
- Work closely with:
- Detection Engineering teams
- Platform Automation and Engineering
- SOC leadership and incident response leads
- Ensure threat hunting insights drive tangible, measurable service improvements.
Threat Hunting & Intelligence Lead employer: Avanade Inc.
Avanade Inc. is an exceptional employer that fosters a culture of innovation and collaboration, particularly in the dynamic field of cybersecurity. With a strong emphasis on employee growth, you will have access to cutting-edge training and development opportunities, enabling you to lead impactful initiatives in AI-driven threat hunting. Located in a vibrant tech hub, our team enjoys a supportive work environment that values diversity and encourages creative problem-solving, making it a rewarding place to advance your career.
StudySmarter Expert Advice🤫
We think this is how you could land Threat Hunting & Intelligence Lead
✨Tip Number 1
Get your networking game on! Connect with professionals in the cybersecurity field, especially those who are already in roles like Threat Hunting & Intelligence Lead. Attend industry events, webinars, or even local meetups to make those valuable connections.
✨Tip Number 2
Show off your skills! Create a portfolio that highlights your hands-on experience with threat hunting methodologies and tools. Share case studies or examples of how you've tackled security challenges in the past – this will set you apart from the crowd.
✨Tip Number 3
Don’t just apply – engage! When you find a job listing that excites you, reach out to someone at the company through LinkedIn or other channels. Ask insightful questions about the role and express your enthusiasm for the position. This can really help you stand out!
✨Tip Number 4
Keep learning and stay updated! The threat landscape is always changing, so make sure you're aware of the latest trends and techniques. Follow relevant blogs, podcasts, and forums to keep your knowledge fresh and relevant for interviews.
We think you need these skills to ace Threat Hunting & Intelligence Lead
Some tips for your application 🫡
Tailor Your CV:Make sure your CV is tailored to the Threat Hunting & Intelligence Lead role. Highlight your relevant experience in threat hunting, intelligence-led security, and any hands-on technical skills that match the job description.
Craft a Compelling Cover Letter:Your cover letter should tell us why you're the perfect fit for this role. Use it to showcase your understanding of the threat landscape and how your skills can contribute to our proactive security outcomes.
Showcase Your Technical Expertise:In your application, don’t shy away from detailing your technical expertise with SIEM platforms, EDR/XDR technologies, and cloud security. We want to see how you can bring your knowledge to our team!
Apply Through Our Website:We encourage you to apply through our website for a smoother process. It helps us keep track of your application and ensures you’re considered for the role without any hiccups!
How to prepare for a job interview at Avanade Inc.
✨Know Your Threat Hunting Methodologies
Before the interview, brush up on various threat hunting methodologies and frameworks. Be ready to discuss how you would design a formal, repeatable threat hunting programme, including your approach to hypothesis-driven models and success metrics.
✨Showcase Your Hands-On Experience
Prepare to share specific examples of your hands-on threat hunting experiences, especially within the Microsoft ecosystem. Highlight your familiarity with EDR/XDR technologies and how you've applied offensive security tradecraft to uncover threats.
✨Demonstrate Coaching Skills
Since this role involves mentoring SOC analysts, think of ways to illustrate your coaching style. Share instances where you've uplifted analyst capabilities through collaborative hunting or developed their investigative skills.
✨Communicate Clearly and Confidently
Practice explaining complex technical concepts in simple, business-relevant language. This will be crucial when discussing how proactive hunting reduces risk and articulating the value of intelligence-led security operations to clients and stakeholders.
