Cyber Threat Intelligence & Incident Response

The Role

This senior individual contributor position centres on hands-on incident response, threat hunting, and threat intelligence across endpoint, identity, and cloud environments. Day-to-day work includes leading investigations from triage to recovery, developing detection rules, analysing malware behaviour, and operationalising intelligence into actionable security improvements.

Skills & Experience

Candidates need five to eight or more years in incident response, threat hunting, or threat intelligence, with strong proficiency in CrowdStrike EDR, SIEM platforms (Splunk, KQL, Sigma), MITRE ATT&CK framework, and cloud log analysis across AWS, Azure, and GCP. Scripting and automation experience is also expected.

Who It Suits

This role suits an experienced security professional comfortable operating independently on complex investigations without close supervision. Those with a background spanning incident response, detection engineering, and threat intelligence — particularly in enterprise or regulated environments — will find this role well matched to their skill set.