Threat Hunter, NCC Group
+ Share Save Scheme
Office located in Hardman Boulevard, Manchester
Leading cyber security & managed services
Be an early applicant
Leading cyber security & managed services
1001+ employees
Be an early applicant
+ Share Save Scheme
Office located in Hardman Boulevard, Manchester
1001+ employees
Company mission
To help keep customers safe and secure.
Role
Who you are
- The ideal candidate is a highly skilled and proactive Threat Hunter with a strong background in hypothesis-driven hunting, adversary TTP analysis, and cross-functional collaboration
- They have hands-on experience in Threat Hunting, Red Team, Blue Team, or Incident Response roles, with a deep understanding of the MITRE ATT&CK framework and a proven ability to detect and investigate advanced threats beyond signature-based solutions
- Experienced using one or more of Splunk, Microsoft, CrowdStrike and SentinelOne SIEM and EDR stacks
- Experience translating threat intelligence into actionable insights and working alongside detection engineers and security analysts to operationalise findings
- They should be driven by curiosity and methodical thinking, constantly seeking to improve visibility and detection coverage across complex environments—including hybrid or cloud-native architectures like AWS, Azure, or GCP
- They will be comfortable presenting findings to stakeholders and documenting methodologies
- They thrive in fast-moving, varied and dynamic environments and are passionate about staying ahead of evolving threats
- Experience within a Threat Hunter, Red Team, Incident Response, Threat Intelligence, Malware Analysis or Blue Team role
- Solid understanding of the MITRE ATT&CK framework, TTP analysis, and adversary emulation
- Deep familiarity with hypothesis-driven threat hunting frameworks and methodologies
- Ability to work autonomously while collaborating across security, engineering, and business teams
- Strong scripting/query language skills (e.g., Python, KQL, SQL, PowerShell)
What the job involves
- We are seeking a highly capable and hands-on Threat Hunter to join a passionate and motivated, industry-leading team focused on identifying sophisticated adversaries through hypothesis-driven analysis and automation
- You will be responsible for proactively hunting and analysing advanced threats across the customers environment using our proprietary hunting framework, ensuring our threat models and threat hunts are tightly aligned to the customer
- As a Threat Hunter, you will actively search for cyber threats that evade traditional security solutions. Your role will involve conducting in-depth intelligence-led, hypothesis-driven analysis of TTPs and behaviours, and working cross-functionally with the Security Operations Centre Analysts, Global Detection Engineers, Privacy Team and Engineering Team to mitigate risks
- Use NCC Group’s HITS Framework, threat intelligence, MITRE ATT&CK, and risk models to form hypotheses and validate them through structured hunts
- Leverage GitLab, Sigma, Jupyter Notebooks and other tools to automate hunts, visualise results, and create reusable artifacts for future investigations and detections
- Collaborate with detection engineering to convert threat hunt findings into high fidelity detection content
- Utilising both NCC Groups internal threat intelligence feeds and open-source threat intelligence, use these to operationalise detections for emerging threats
- Support the mapping of threat models to monitoring use cases in partnership with teams across the business
- Document and maintain a robust repository for hunting methodologies, tooling, and findings to enable continuous improvement and team scaling
- Provide regular reports and presentations to stakeholders, with clear articulation of threats, methods, and risk impact
Application process
- We review every application received and will get in touch if your skills and experience match what we’re looking for. If you don’t hear back from us within 10 days, please don’t be too disappointed – we may keep your CV on our database for any future vacancies and we would encourage you to keep an eye on our career opportunities as there may be other suitable roles
- To ensure a fair and consistent assessment process, candidates must not use AI tools to generate, suggest, coach or provide responses during live or recorded interviews unless this has been approved in advance, by the hiring team
Our take
NCC Group is a global cyber and software resilience businesses that assesses, develops and manages cyber threats. The company operates across multiple sectors, geographies and technologies but with the universal mission of communicating the best ways to keep businesses, software and personal data safe.
As we become more entrenched in the digital age, businesses are more vulnerable to cyber-related risk, and this is where NCC Group comes in. Its services work to make the Internet safer and to change the way that organisations think about cyber security. It continues to build momentum as our society becomes increasingly connected but more uncertain.
NCC Group's role is only set to grow too. As technology evolves and cyber threats become more sophisticated, businesses and individuals will need trusted partners to navigate the risks. NCC Group's expertise, global reach, and proactive approach puts it in a position to help organisations not only respond to threats, but to stay ahead of them.
Steph
Company Specialist at Welcome to the Jungle
Insights
-4% employee growth in 12 months
Company
Company HQ
Spinningfields, Manchester, UK
Leadership
Mike Maddison
(Group CEO)Former head of EY’s cyber security, privacy, and trusted technology practice for EMEA. Previously led PwC’s Risk Services practice across the Middle East and before that was head of Deloitte’s cyber security consultancy in EMEA.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 12 more jobs at NCC Group