Threat Hunting & Detection Analyst

Role: Threat Hunting & Detection Analyst Location: Cheltenham (hybrid- 1x a month office attendance)   Position: Specialist / Senior Analyst   Please Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance which requires 5 years continuous UK address history (typically including no periods of 30 consecutive days or more spent outside of the UK) and declaration of being a British passport holder with no dual nationalism at the point of application. Note: The above information relates to a specific client requirement. About the team: As a member of the SOC Content Team, you will be responsible for contributing to the creation, deployment, and tuning of threat detection content and delivery of proactive threat hunting. You will work in close partnership with client Lead Analysts, threat intelligence teams, and other SOC functions to help ensure that detection strategies are tailored to each client’s threat profile and security objectives. This role offers a balance of technical hands-on work, collaboration, and knowledge sharing, with a strong emphasis on continual learning and process improvement. Career Level & Experience   We recognise that strong cyber security professionals may come from a variety of backgrounds and may not have experience across every area listed in this role profile.   We are open to considering candidates at   different stages   of their careers, from developing practitioners through to experienced specialists. Candidates with strengths in   Threat Hunting ,   Detection Engineering ,   SOC Operations , or   Security Monitoring & Incident Response   are encouraged to apply.   You do not need to meet every requirement listed below. If you have strong experience in one or more of these areas and are keen to develop your   expertise   across the wider detection and threat hunting lifecycle, we   would   welcome your application. The level and responsibilities of the role will be aligned to your skills, experience, and potential.   Key Responsibilities: Threat Detection Use Case Development   Design and implement detection logic aligned to specific threat scenarios using frameworks such as MITRE ATT&CK.   Develop, test, deploy, and tune detection content throughout its lifecycle.   Work closely with Client Lead Analysts to ensure detection content   remains   relevant and effective for client environments.   Proactive Threat Hunting   Conduct hypothesis-driven threat hunts using client telemetry, threat intelligence, and observed anomalies.   Analyse available data sources to   identify   suspicious or malicious activity that may evade existing detections.   Document and present findings in a clear, actionable format for both internal teams and clients.   Content QA and Maintenance   Review and   validate   detection content prior to deployment.   Maintain and update runbooks, SOPs, and detection playbooks to reflect evolving threats, tooling, and client requirements.   Support quality assurance activities to ensure consistency, accuracy, and effectiveness of delivered content.   Collaboration & Knowledge Sharing   Collaborate with SOC, Threat Intelligence, and Engineering teams to enhance detection strategies.   Share findings, insights, and best practices through documentation, workshops, and knowledge-sharing sessions.   Contribute to continuous improvement initiatives across the wider security operations function.   Skills & Experience: Experience with SIEM platforms such as Microsoft Sentinel, Splunk etc   Previous   experience working in a SOC, Threat Hunting, Detection Engineering, or Cyber Security Operations environment .   Experience developing, testing, and tuning threat detection use cases.   Good understanding of the MITRE ATT&CK framework and common threat actor tactics, techniques, and procedures (TTPs).   Experience conducting proactive threat hunting and analysing security telemetry.   Strong analytical, investigation, and communication skills.   Ability to collaborate effectively with SOC analysts, threat intelligence teams, and other security stakeholders.   E xperience in EDR tooling such as CrowdStrike & Microsoft Defender -   des irable.   Why Accenture? You'll work on complex and innovative cybersecurity projects, leveraging the latest technologies alongside a global network of experts. We provide access to industry-leading training, professional development, and opportunities to build a rewarding long-term career. What’s in it for you At Accenture in addition to a competitive basic salary, you will also have an extensive benefits package which includes 25 days’ vacation per year, private medical insurance and 3 extra days leave per year for charitable work of your choice! Flexibility and mobility are required to deliver this role as there may be requirements to spend time onsite with our clients and partners to enable delivery of the first-class services we are known for. We believe in inclusion and diversity and supporting the whole person. Our core values comprise of Stewardship, Best People, Client Value Creation, One Global Network, Respect for the Individual and Integrity. Year after year, Accenture is recognized worldwide not just for business performance but for inclusion and diversity too. “Across the globe, one thing is universally true of the people of Accenture: We care deeply about what we do and the impact we have with our clients and with the communities in which we work and live. It is personal to all of us.” – Julie Sweet, Accenture CEO Accenture reserves the right to close the role should a suitable applicant be found. RROOTS #LI-EU. About Accenture Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen ser