Security Monitoring and Threat Hunting Analyst

Summary: The Security Monitoring and Threat Hunting Analyst is tasked with monitoring cyber alerts, investigating suspicious activities, and proactively hunting for threats to mitigate cyber risks. This role involves alert triage, analytical investigations, and hypothesis-driven threat hunts to enhance early threat detection and escalation processes. The analyst will work with various security platforms to correlate data and document findings effectively. Strong communication skills and a solid understanding of cyber defense mechanisms are essential for success in this position.

Key Responsibilities:

• Monitor, triage, enrich, and investigate cyber alerts from SIEM, EDR/XDR, identity, cloud, network, email, and other security platforms.
• Correlate activity across telemetry sources to determine severity, scope, affected assets, user context, and appropriate escalation paths.
• Conduct hypothesis-driven threat hunts informed by threat intelligence, adversary behavior, incident trends, anomalies, and known detection gaps.
• Document alert analysis, hunt methodology, findings, timelines, evidence, conclusions, and recommended follow-up actions.
• Escalate confirmed or suspected threats to incident response or security operations teams with clear evidence, confidence level, and recommended next steps.
• Identify opportunities to improve detections, logging, enrichment, playbooks, and analyst workflows based on alert and hunt outcomes.

Key Skills:

• Experience in security monitoring, threat hunting, incident response, SOC operations, or a related cyber defense function.
• Hands-on experience analyzing alerts and telemetry from SIEM, EDR/XDR, identity, cloud, network, email, or endpoint security platforms.
• Ability to perform investigative analysis, correlate events, assess risk, and determine when activity should be escalated.
• Working knowledge of adversary tactics, techniques, and procedures across enterprise environments.
• Ability to write and execute analytical queries using SPL, KQL, SQL, EDR query languages, or similar tools.
• Strong written and verbal communication skills, including the ability to document findings and explain technical analysis clearly.
• Baseline proficiency in enterprise-approved AI tools. This includes, but is not limited to: Consistent Use, Applied Productivity, and Continuous Learning of AI Tools.

Salary (Rate): undetermined

City: undetermined

Country: undetermined

Working Arrangements: remote

IR35 Status: undetermined

Seniority Level: undetermined

Industry: IT