SC Cleared Cyber Security Specialist - Detection, Threat Hunting, L3

Role Description: Role Overview:

Role Overview

The Cyber Security Specialist will operate as an Embedded member of the THaDE team, providing advanced support across security monitoring, threat detection, and incident management. The role requires strong hands-on expertise in Security Information and Event Management (SIEM) platforms, with a focus on enhancing detection capabilities and proactively identifying threats.

Detection Engineering

• Design, develop, and optimise security detections across both SIEM platforms
• Continuously improve detection rules to enhance coverage and reduce false positives

Threat Hunting

• Conduct proactive threat hunting activities across both SIEM environments
• Identify and investigate anomalous or malicious behaviour patterns

Level 3 Incident Management Support

• Provide advanced (L3) technical support to the Incident Management (IM) function
• Support investigation, containment, and resolution of complex security incidents
• Act as an escalation point for security-related issues within the IM process

Key Skills and Experience

• Strong hands-on experience with enterprise SIEM platforms (multi-SIEM environments preferred)
• Proven capability in detection rule creation and tuning
• Demonstrated experience in proactive threat hunting methodologies
• Deep understanding of incident response processes and escalation handling (L3 support)
• Ability to work independently within an Embedded team model