Senior Threat Hunter (Specialist I - Information Security) - London
- Discuss this with your agent
- Open in Claude
- Open in ChatGPT
Role details
Tech stack
+9 more
Job description
We are looking for a Senior Threat Hunter with strong expertise in Python and Jupyter Notebooks to join our Managed Security Services team in London.This role combines advanced threat hunting with engineering capabilities, focusing on building scalable, automated, and repeatable threat hunting frameworks across large datasets in enterprise environments.Key ResponsibilitiesPerform proactive, hypothesis-driven threat hunting aligned to MITRE ATT&CKAnalyze and investigate security data across endpoint, network, and cloud environmentsIdentify indicators of compromise, suspicious activity, and emerging threatsDevelop and maintain Jupyter Notebook-based hunting frameworksBuild reusable Python modules, APIs, and automation toolsDesign and maintain data pipelines for telemetry and threat intelligence integrationAutomate hunting workflows using orchestration tools (e.g., Azure ML pipelines)Apply data normalization, validation, and correlation techniquesCollaborate with SOC, Threat Intelligence, and
Requirements
Detection Engineering teamsProduce clear and structured threat hunting reports and findingsRequired Skills & Experience5+ years of experience in Threat Hunting, Detection Engineering, or Incident ResponseStrong hands-on experience with: Python (Pandas preferred)Jupyter NotebooksExperience working with: SIEM / EDR / XDR platformsLarge-scale security telemetry and data analysisStrong understanding of: MITRE ATT&CK framework and attacker TTPsWindows and Linux operating systemsNetwork traffic and log analysisExperience in cloud threat hunting (AWS, Azure, GCP)Good understanding of: CI/CD pipelines, SDLC, and automation practicesPreferred QualificationsExperience with tools such as Microsoft Sentinel, Defender, CrowdStrike, CybereasonExperience building automation for detection validation, rule deployment, or telemetry pipelinesRelevant certifications such as GIAC, OSCP, or CEHWork ModelHybrid role based in LondonPermanent positionCollaboration with global teams
Apply for this position
This job is hosted externally. Click below to view the full posting and apply.
Apply on find.jobsGood distractions
Talks and stories from around this role — technically off-topic, practically not.
Moments
Explore playlistsVideos
See allRelated articles
See all
Is Software Engineering Over-Saturated?
Where To Find Software Engineering Jobs
Why Upskilling And Reskilling is Important For Developers
Data Analyst Salary in the UK