Lead Threat Hunter

Job Description 

The Security Operations Centre (SOC) is part of the Admiral Group’s Security Operations function. The SOC is looking for an experienced threat hunter. The overall aim of this role is to ensure that threat-hunting activities are conducted daily. 

The role will be responsible for planning and conducting threat-hunting operations on an ongoing basis and ensuring that any mitigation and/or remediation activities based on hunt findings are initiated in a timely and efficient manner. The role will be supported by the threat hunters within the team as well as the overall SOC team. 

Accountabilities:

• Planning and execution of threat-hunting campaigns on assessed priority threats.
• Collecting and assessing findings and initiating mitigation/remediation actions.
• Assessing and suggesting process improvements for the efficient threat-hunting function.
• Maintain and optimise existing technology platforms used for threat hunting.
• Identify and suggest technology and automation requirements and improvement potentials. 

Responsibilities:

• Producing detailed Intelligence requirements for the Threat Intelligence team.
• Ensuring all required Intelligence is available to the hunt team on a timely basis.
• Analysing threat actor attack chains and building detailed hunting campaigns.
• Identify, and propose relevant technology solutions/automation opportunities.
• Ensure necessary mitigation/remediation actions are initiated, engaging with the overall SOC team, Incident Response and other stakeholders.
•  Collecting and producing management information on threat hunting regularly.
• Help the function leads in building the overall threat-hunting capabilities.
• Provide threat-hunting subject matter expertise to the overall SOC function.
• Mentor and coach junior members of the team.

Key Interactions:

• Engage with the Cyber Threat Intelligence (CTI) team to supply them with necessary Intelligence requirements and ensure that the required finished Intelligence is available to the hunting team. 
• Consult with the overall SOC team to assess and act on findings. 
• Engage with the Incident Response team when needed. 
• Engage with other security operations stakeholders as needed. Job  

Knowledge and Experience Required:

• Extensive hands-on experience in threat hunting and/or threat intelligence.
• Minimum 5 years overall experience in cyber security operations. 
• Solid functional understanding of general cyber security concepts.
• Good technical knowledge of cyber-exploitation tactics, techniques and procedures (TTP).
• Good understanding of general web and networking technologies. 
• Working knowledge of building detection rules and queries is desirable. 
• Working experience in SIEM / EDR /SOAR platforms is desirable but not mandatory. 

Professional Training Requirements:

• No formal training/certification is mandatory. 

Recruitment process:

• 20 - 30 minute chat with the hiring manager, Bappa Dey.
• Final stage interview

Our Commitment to You

At Admiral, we are committed to being a diverse and inclusive workplace. Admiral is proud to be an equal opportunities employer and does not discriminate on the basis of race, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), national origin, gender, gender identity, sexual orientation, disability, age, or any other legally protected status.

All qualified applicants will receive equal consideration for employment.

Salary, Benefits and Work-Life Balance

We do not have a set salary for this position, as it will be dependent on the successful candidate’s experience. We are happy to see CVs from all candidates who meet the requirements and will be happy to discuss the remuneration package.

At Admiral, we are proud to be a diverse business where we put our people and customers first. We have great benefits to ensure employees have a great work-life balance; it's one of the reasons we’re consistently voted one of the Sunday Times Best Big Companies to Work For in the UK. We want you to have an element of freedom to define a working lifestyle that supports this, so accommodate flexible hours wherever possible.

All colleagues will receive 33 days holiday (including banks holidays) when they join us, and this will increase with length of service, up to a maximum of 38 days (including banks holidays). You also have the option to buy or sell up to five days of annual leave in addition to your allocation.

You can also view some of our other key benefits here.

#LI-NT1