Cyber Threat Detection SOC Analyst

- Conduct proactive threat hunting activities across log, endpoint, and network telemetry to identify suspicious, stealthy, or previously unknown threats. - Develop and execute hunt hypotheses aligned to MITRE ATT&CK TTPs, adversary behaviours, and emerging threat intelligence. - Write, refine, and optimise SIEM queries using KQL, SPL, Elastic/ESQL, and Kibana Query Language. - Perform IOC analysis, enrichment, and validation, integrating internal and external threat intelligence sources. - Lead investigations from initial detection through scoping, root cause analysis, and impact assessment. - Support incident management and incident response activities, including containment, remediation, escalation, and lessons learned. - Collaborate closely with SOC teams, incident responders, red teams, and purple teams to validate detections and improve defensive coverage. - Contribute to detection logic improvements, use-case development, and continuous enhancement of hunting methodologies. - Produce clear investigation write-ups, timelines, and recommendations for technical and non-technical stakeholders.