Senior Threat Hunting & Incident Response - EMEA

Reference: ccn8ssvzlpmkg0niflc3

We are seeking a Senior Threat Hunting & Incident Response professional to lead advanced cyber defence activities across the EMEA region. This role will be responsible for proactively identifying sophisticated threats, investigating security incidents and coordinating effective containment and recovery actions. You will work closely with security operations, infrastructure, cloud, application and risk teams to strengthen detection capabilities and reduce organisational exposure.

Key responsibilities include designing and executing threat-hunting investigations across endpoint, network, identity, cloud and application environments; analysing security telemetry to identify indicators of compromise, attacker behaviour and emerging techniques; and leading incident response activities from initial triage through eradication, recovery and lessons learned. You will develop and maintain incident response playbooks, improve detection rules and use threat intelligence to inform monitoring priorities. The role will also involve conducting root-cause analysis, producing clear technical and executive-level reports, supporting digital forensic investigations and helping to coordinate responses with internal and external stakeholders across multiple countries and time zones.

The successful candidate will have significant experience in threat hunting, cyber incident response, security investigations or a closely related discipline, ideally within a complex international environment. Strong knowledge of attack frameworks such as MITRE ATT&CK, common intrusion techniques, malware behaviour, identity attacks and cloud security is expected. You should be confident working with SIEM, EDR, network detection and response, vulnerability, case-management and forensic tooling, with practical experience developing queries, analysing logs and automating repeatable tasks using scripting languages such as Python or PowerShell. Excellent communication, prioritisation and decision-making skills are essential, together with the ability to remain calm during high-impact incidents. Relevant professional certifications in incident handling, threat intelligence, digital forensics or security operations are advantageous. The position may require participation in an on-call rota and occasional travel within EMEA.

COMPETITIVE SALARY
Added 07/10/2026
Reference: ccn8ssvzlpmkg0niflc3

Senior Threat Hunting & Incident Response - EMEA

London, England, United Kingdom Permanent Incident Response

Other similar jobs

Threat Hunting & Detection Analyst

Added 07/10/2026

We are seeking a Threat Hunting & Detection Analyst to identify, investigate and help disrupt advanced cyber threats across a complex technology environment. You will proactively search for indicators of compromise, suspicious behaviours and emerging attack techniques that may evade traditional security controls. Working closely with security operations, incident response, engineering and infrastructure teams, you will turn intelligence and investigative findings into practical improvements to monitoring and defensive capabilities. Your responsibilities will include developing and refining threat-hunting hypotheses, analysing security telemetry from endpoint, network, identity, cloud and application sources, and conducting detailed investigations into anomalous activity. You will create, test...

Learn more

Assistant Vice President, Threat Hunting Lead

Added 25/09/2026

We are seeking an experienced Assistant Vice President, Threat Hunting Lead to develop and lead a proactive cyber threat hunting capability across a complex enterprise environment. This role will identify emerging and persistent threats that may evade traditional security controls, using intelligence-led investigations, advanced analytics, endpoint telemetry, network data, cloud activity and identity signals. The successful candidate will shape the threat hunting strategy, establish repeatable operating processes and ensure that findings are translated into measurable improvements in detection, prevention and response. Responsibilities will include leading a team of threat hunters and coordinating closely with security operations, incident response, cyber intelligence,...

Learn more

Threat Intelligence & Hunting Manager

Added 25/08/2026

We are seeking an experienced Threat Intelligence & Hunting Manager to lead the development and delivery of a proactive cyber defence capability. You will manage a team of threat intelligence analysts and threat hunters, helping to identify emerging risks, investigate sophisticated activity and strengthen the organisation’s ability to detect and respond to attacks. This is a strategic and hands-on leadership role, requiring you to translate complex intelligence into clear, actionable recommendations for technical teams and senior stakeholders. You will oversee the collection, analysis and dissemination of cyber threat intelligence from open-source, commercial, government and internal sources. Responsibilities will include developing...

Learn more

Threat Intelligence & Hunting Manager

Added 18/08/2026

We are seeking an experienced Threat Intelligence & Hunting Manager to lead our cybersecurity initiatives and strengthen our defense mechanisms against advanced threats. In this role, you will be responsible for developing and implementing threat intelligence strategies, analyzing threat data, and providing actionable insights to enhance our security posture. You will manage a team of threat analysts and hunters, coordinating efforts to identify, investigate, and mitigate potential threats to our systems and data. Your expertise will be critical in building and refining our threat intelligence program, ensuring that we are always one step ahead of cyber adversaries. The ideal candidate...

Learn more

Security Engineer, Detection and Response - EMEA

Added 18/08/2026

We are seeking a talented Security Engineer specializing in Detection and Response to join our dynamic team in the EMEA region. In this role, you will be responsible for identifying, analyzing, and responding to security incidents, ensuring the integrity and security of our systems and data. You will work closely with cross-functional teams to develop and implement advanced detection strategies, leveraging various security tools and technologies to enhance our incident response capabilities. Your expertise will play a vital role in shaping our cybersecurity posture and protecting our organization against evolving threats. The ideal candidate will possess a solid understanding of...

Learn more

Threat Analyst, EMEA

Added 29/09/2026

We are seeking a Threat Analyst, EMEA, to support the identification, assessment and communication of cyber threats affecting the organisation’s people, systems and operations across the region. You will monitor intelligence sources, security alerts and emerging attack trends to identify relevant risks, helping stakeholders understand potential impact and take appropriate action. This role will suit an analytical professional who can translate complex technical information into clear, practical advice for both technical and non-technical audiences. Key responsibilities include collecting, validating and analysing threat intelligence from open-source, commercial and internal sources; tracking threat actors, campaigns, vulnerabilities and indicators of compromise; and producing...

Learn more

Senior Security Incident Response Analyst

Added 23/09/2026

We are seeking a Senior Security Incident Response Analyst to lead the investigation, containment, and resolution of complex cybersecurity incidents across a diverse technology environment. In this role, you will monitor and analyse security alerts, coordinate rapid responses to suspected breaches, and provide expert guidance throughout the incident lifecycle. You will work closely with security operations, infrastructure, engineering, legal, risk, and business teams to assess impact, minimise disruption, and restore secure operations. Your responsibilities will include developing and refining incident response procedures, conducting detailed analysis of endpoint, network, identity, cloud, and application data, and performing forensic investigations to determine attack...

Learn more

Senior Manager, Global Cyber Security Incident Response (Global CSIRT)

Added 18/09/2026

We are seeking a Senior Manager, Global Cyber Security Incident Response to lead and evolve a global incident response capability. This role will be responsible for directing the identification, containment, investigation and recovery of significant cyber security incidents across a complex, international environment. You will provide calm, decisive leadership during high-impact events, coordinate technical and business stakeholders, and ensure that response activities protect critical services, data and customer trust. The role will also contribute to the development of a mature, intelligence-led and continuously improving Global CSIRT function. Key responsibilities include leading incident response teams and third-party partners through suspected and...

Learn more

Senior SOC Analyst - Incident Response

Added 02/09/2026

We are seeking a Senior SOC Analyst – Incident Response to lead the investigation, containment, and resolution of complex cybersecurity incidents. You will act as a senior point of escalation within the Security Operations Centre, providing expert guidance during high-impact events and helping strengthen the organisation’s overall incident response capability. The role involves working closely with security engineering, infrastructure, application, risk, and compliance teams to protect critical systems, data, and services. Your responsibilities will include monitoring and analysing alerts from SIEM, EDR, network, cloud, identity, and threat intelligence platforms; validating suspected incidents; performing detailed investigation and forensic analysis; and coordinating...

Learn more

Senior Associate, Cyber Security Analyst – Incident Response

Added 02/09/2026

We are seeking a Senior Associate, Cyber Security Analyst – Incident Response to join a dedicated security operations function. In this role, you will help protect critical systems, data and services by leading the investigation and response to cyber security incidents. You will work closely with technology, risk, infrastructure and business teams to identify threats, contain activity, recover affected environments and strengthen the organisation’s overall security posture. Key responsibilities include monitoring and analysing security alerts, endpoint activity, network traffic, identity events and other indicators of compromise. You will triage incidents, determine scope and severity, coordinate containment and eradication activities, and...

Learn more

Senior SOC Analyst - Incident Response

Added 02/09/2026

We are seeking a Senior SOC Analyst – Incident Response to lead the investigation, containment and resolution of complex cybersecurity incidents across a diverse technology environment. You will act as a senior escalation point within the Security Operations Centre, providing expert analysis during high-impact events and helping to protect critical systems, data and services. The role will involve working closely with infrastructure, cloud, engineering, risk and business teams to coordinate effective responses and minimise operational disruption. Your responsibilities will include monitoring and triaging alerts from SIEM, EDR, network, identity and cloud security platforms; conducting in-depth analysis of logs, endpoint activity,...

Learn more

Senior SOC Analyst - Incident Response

Added 02/09/2026

We are seeking a Senior SOC Analyst – Incident Response to lead the investigation, containment, and resolution of complex cybersecurity incidents. You will operate as a senior member of a security operations team, providing expert guidance during active incidents and helping protect critical systems, applications, and data. The role requires strong analytical thinking, sound technical judgement, and the ability to remain calm and decisive in a fast-moving environment. Responsibilities include monitoring and triaging security alerts, investigating suspected compromises, conducting threat hunting, and coordinating end-to-end incident response activities. You will analyse events from SIEM, EDR, network, identity, cloud, and other security...

Learn more

Senior SOC Analyst - Incident Response

Added 02/09/2026

We are seeking a Senior SOC Analyst – Incident Response to lead the investigation, containment and resolution of complex cybersecurity incidents. In this role, you will act as a senior escalation point within the security operations function, coordinating response activities across technical teams and providing clear, timely updates to relevant stakeholders. You will analyse alerts and events from SIEM, EDR, network security and cloud platforms, identify indicators of compromise, determine root cause and assess the scope and impact of incidents. Your responsibilities will include developing and executing incident response procedures, conducting forensic investigations, performing threat hunting and supporting malware and...

Learn more

Senior SOC Analyst - Incident Response

Added 02/09/2026

We are seeking a Senior SOC Analyst – Incident Response to lead the investigation, containment, and resolution of complex cybersecurity incidents. In this role, you will act as a senior point of escalation within the Security Operations Centre, providing expert analysis and guidance during high-impact events. You will monitor and investigate alerts across endpoint, network, cloud, identity, and application environments, using SIEM, EDR, threat intelligence, and other security technologies to identify malicious activity and assess business risk. You will coordinate incident response activities from initial triage through eradication, recovery, and post-incident review. Responsibilities include developing and refining detection rules, conducting...

Learn more

Senior Security Consultant (Incident Response)

Added 26/08/2026

We are seeking a Senior Security Consultant (Incident Response) to lead and support the investigation, containment and recovery of complex cybersecurity incidents. This role will work closely with clients and internal stakeholders to provide expert guidance throughout the incident lifecycle, from initial triage and scoping through to remediation, lessons learned and strategic improvement. You will be expected to operate confidently in high-pressure situations, communicate clearly with both technical and non-technical audiences, and help organisations strengthen their resilience against future threats. Key responsibilities include leading or contributing to digital forensics and incident response engagements; analysing endpoint, network, identity, cloud and application...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.