> Markdown version of [/jobs/ext/1418264-threat-hunting-detection-engineering-analyst](https://www.wearedevelopers.com/jobs/ext/1418264-threat-hunting-detection-engineering-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Threat Hunting & Detection Engineering Analyst

- **Company:** Anson McCade
- **Location:** Cheltenham, UK
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Intrusion Detection and Prevention, Security Information and Event Management, Mitre Att&ck, Cyber Threat Analysis, Cybercrime
- **Published:** July 24, 2026
- **Apply:** https://www.totaljobs.com/job/threat-analyst/anson-mccade-job107739976

## About the Role

We're looking for security professionals with experience in threat detection, SOC operations or cyber defence who are passionate about identifying sophisticated threats and improving security operations.

You'll ideally have experience with:

 * Threat Hunting
 * Detection Engineering
 * Security Operations Centres (SOC)
 * SIEM technologies
 * MITRE ATT&CK Framework
 * Threat Intelligence
 * Detection rule creation and tuning
 * Security telemetry analysis
 * Incident detection and investigation
 * Writing detection use cases and playbooks
 * Developing and maintaining security content
 * Working with enterprise security tooling
 * Strong stakeholder communication and collaboration skills

## Description

As a Threat Hunting & Detection Engineering Analyst, you'll be responsible for designing, developing and optimising threat detection capabilities while proactively hunting for malicious activity across complex enterprise environments.

You'll work with a collaborative team of cyber specialists, contributing to innovative detection strategies that help clients stay ahead of evolving threats.
Key Responsibilities

 * Design, develop and maintain threat detection use cases aligned to real-world attack scenarios
 * Build and tune detection logic using industry frameworks such as MITRE ATT&CK
 * Conduct proactive, hypothesis-led threat hunting across client environments
 * Analyse telemetry, threat intelligence and security data to identify suspicious activity
 * Develop, test and optimise detection content throughout its lifecycle
 * Produce clear technical documentation, reports and recommendations
 * Maintain detection playbooks, SOPs and operational documentation
 * Collaborate with SOC teams, Threat Intelligence specialists and client stakeholders to continuously improve detection coverage
 * Share technical knowledge and contribute to continuous improvement initiatives across the wider security function.


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Getting under the skin: The Social Engineering techniques](https://www.wearedevelopers.com/videos/38-getting-under-the-skin-the-social-engineering-techniques)
- [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems)
- [Building Security Champions](https://www.wearedevelopers.com/magazine/87-building-security-champions)