> Markdown version of [/jobs/ext/3019228-cyber-security-threat-hunter-11832sr1](https://www.wearedevelopers.com/jobs/ext/3019228-cyber-security-threat-hunter-11832sr1). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Threat Hunter - 11832SR1

- **Company:** Proactive.IT Appointments Ltd.
- **Location:** Southampton, UK (Remote available)
- **Salary:** £60,000.0 - £68,000.0
- **Contract:** Permanent contract
- **Skills:** Query Performance, Microsoft Windows, Active Directory, User Authentication, Microsoft Azure, Cloud Computing Security, Cyber Security, Kerberos (Protocol), NT LAN Manager, OAuth, Parsing, Windows PowerShell, Red Team (Cyber Security), Kusto Query Language, Microsoft SharePoint, Windows Security
- **Published:** September 21, 2026
- **Apply:** https://www.apply4u.co.uk/jobs/cyber-security-threat-hunter-11832sr1/47809962

## About the Role

networking and digital forensicsMicrosoft Azure and Microsoft 365 cloud technologiesThreat intelligence-driven hunting: Demonstrated use of threat intelligence to plan hunts, enrich detections, and block malicious infrastructureWindows and identity fundamentals: Strong understanding of Windows security concepts and Microsoft identity (Active Directory and Entra ID), including authentication and token flows (Kerberos/NTLM/OAuth), device join states, MFA/Conditional Access concepts, and common identity attack pathsEndpoint telemetry literacy: Ability to interpret process trees and command lines, PowerShell activity, scheduled tasks/services, registry and file changes, WMI usage, persistence techniques, and LOLBins and to connect these artifacts to Defender alerts and timelinesMicrosoft 365 and cloud security foundations: Familiarity with email security and message flow (Exchange Online), and investigation pivots across SharePoint/OneDrive/Teams activity and Azure logs where relevant to XDR
incidentsDetection engineering mindset: Experience translating hunts and red team findings into practical detections and improvements (signal selection, tuning, suppression/thresholding, entity mapping, documentation, and operational handoff)KQL depth and query performance: Comfortable using joins/unions, parsing, time-windowing, summarisation, Essential baselining, and performance-aware query patterns for large datasetsCyber Security Threat Hunter - Remote Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted. Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisationWe take our obligations to protect your personal data very seriously. Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website



## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json)
- [ The attacker's footprint](https://www.wearedevelopers.com/videos/375-the-attacker-s-footprint)
- [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers)
- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)