Enterprise Threat Detection - DV cleared

• Monitor and analyse enterprise environments to identify potential cyber threats, vulnerabilities and suspicious activity.
• Develop, implement and maintain enterprise threat detection capabilities and security monitoring processes.
• Analyse security alerts, logs and events to identify indicators of compromise (IoCs) and potential malicious activity.
• Investigate and respond to security incidents, supporting containment, remediation and recovery activities.
• Develop and refine detection rules, use cases and threat detection techniques to improve security coverage.
• Work with Security Operations Centre (SOC) teams and wider cybersecurity stakeholders to investigate emerging threats.
• Conduct threat hunting activities to identify previously undetected malicious activity.
• Analyse threat intelligence and translate findings into actionable detection capabilities.
• Produce technical reports, incident findings and recommendations for improving security monitoring.
• Support continuous improvement of enterprise security controls, detection processes and operational resilience.

This is an opportunity for a DV-cleared cybersecurity professional with experience in enterprise threat detection, security monitoring and threat analysis to support the identification, investigation and mitigation of cyber threats across a complex enterprise environment.

The successful candidate will have a strong understanding of security operations, threat detection methodologies and the tools and technologies used to identify suspicious activity, investigate potential compromises and strengthen an organisation’s overall security posture., * Active DV Security Clearance.

• Proven experience in Enterprise Threat Detection, cyber threat analysis or security operations.
• Strong understanding of SIEM technologies, security monitoring and event correlation.
• Experience analysing security logs, alerts and network activity.
• Knowledge of threat detection methodologies, attack techniques and indicators of compromise.
• Experience developing or tuning detection rules and security use cases.
• Understanding of incident investigation and response processes.
• Strong analytical and problem-solving skills.
• Ability to communicate technical security findings to both technical and non-technical stakeholders.

Desirable Experience

• Experience working within UK Defence, Government or other highly secure environments.
• Familiarity with MITRE ATT&CK and threat intelligence frameworks.
• Experience with enterprise security monitoring platforms and EDR technologies.
• Knowledge of network security, endpoint monitoring and cloud threat detection.