About the role
Extensive and demonstrated professional experience in Threat Hunting, Incident Response (DFIR), Threat Intelligence, or Security Research. Experience investigating sophisticated cyber threats, including APT or nation-state activity. Extensive experience working with forensically collected data (and tooling), security telemetry, logs and SIEM platforms. Expertise in KQL or equivalent query languages (Splunk, Humio, Kibana, etc.). Proven ability to analyze security data to investigate attacker activity, and derive identify indicators of compromise (IOCs), indicators of activity (IOAs), and TTPs. Experience and familiarity with the collection of Digital Forensic data, as well as case management and forensic analysis tooling such as X-Ways Forensics. Excellent written and verbal communication skills in English and ability to work in a global team environment Ability to obtain and maintain a UK Security Clearance. Industry certifications in cybersecurity, DFIR, incident response, or threat hunting (e.g., CISSP, GIAC). Experience across multiple cybersecurity disciplines, including threat hunting, incident response, digital forensics, and threat intelligence. Experience leading technical workstreams in Incident Response scenarios. Experience analyzing large-scale security telemetry and hunting across enterprise environments. Understanding of scripting or the ability to read and interpret code and automation workflows.
