CONTRACTOR MUST BE SC CLEARED (active)

Role Title: CyberSecurity Specialist

Location: Bearwood Rd, Wokingham RG41 5BN | Hybrid - 50/50

Duration: 25/12/2026

MUST BE PAYE THROUGH UMBRELLA

Role Description:

Role Overview:

• The Cyber Security Specialist will operate as an Embedded member of the THaDE team, providing advanced support across security monitoring, threat detection, and incident management. The role requires strong hands-on expertise in Security Information and Event Management (SIEM) platforms, with a focus on enhancing detection capabilities and proactively identifying threats.

Key Responsibilities:

Detection Engineering:

• Design, develop, and optimise security detections across both SIEM platforms
• Continuously improve detection rules to enhance coverage and reduce false positives

Threat Hunting:

• Conduct proactive threat hunting activities across both SIEM environments
• Identify and investigate anomalous or malicious behaviour patterns

Level 3 Incident Management Support:

• Provide advanced (L3) technical support to the Incident Management (IM) function
• Support investigation, containment, and resolution of complex security incidents
• Act as an escalation point for security-related issues within the IM process

Key Skills and Experience:

• Strong hands-on experience with enterprise SIEM platforms (multi-SIEM environments preferred)
• Proven capability in detection rule creation and tuning
• Demonstrated experience in proactive threat hunting methodologies
• Deep understanding of incident response processes and escalation handling (L3 support)
• Ability to work independently within an Embedded team model