Threat Hunting & Detection Engineering Analyst - NESO

at  National Grid

KEY ACCOUNTABILITIES

• Create novel detection content by utilising threat modelling and coverage gap analysis.
• Conduct proactive threat hunting following defined threat hunting frameworks, creating actionable output to feed to key stakeholders.
• Create response documentation to assist the SOC in the triaging of incidents generated by the THaDE team’s detections.
• Ensure continuous improvement of the THaDE detection content library by conducting proactive tuning and logic updates.
• Support the Cyber Security Operations Centre (CSOC) team in incident escalations where needed.
• Through the THaDE Manager, provide regular reports and metrics on the threat hunting and detection engineering activities and outcomes.

ABOUT YOU

We’re forging the path, and we know we can’t do it alone. That’s why we need visionary minds like yours to join us on this transformative journey. In this case, we’re looking for someone who:

• Is passionate about threat hunting.
• Has experience of designing novel detection mechanisms.
• Solid experience of using SIEM and EDR technologies.
• Is a strong communicator with excellent writing skills.

ABOUT US

Traditionally, Britain’s energy system has been split into two areas – gas and electricity – but to ensure that Britain’s energy system is secure and affordable there needs to be co-ordination across the whole energy system, with one single entity responsible for translating policy into immediate strategy. National Energy System Operator (NESO) will bring unparalleled change.
Forge a path to a sustainable future for everyone.
Your energy, our future, together.

National Energy System Operator (NESO) is on a journey towards a sustainable and secure energy future. Together we build on this momentum, advancing the Electricity System Operator’s (ESO) plan for zero carbon operability of the electricity system by 2025.
National Energy System Operator (NESO) are now looking for a talented Threat Hunting & Detection Engineering Analyst to join as part of the growing THaDE team. This exciting opportunity will involve designing, shaping & building novel detection strategies, executing threat hunting initiatives, and assisting in the creation of mature response frameworks.
The THaDE Analyst will work in collaboration with the wider Security Operations function to ensure a high level of cyber defence maturity, ensuring the security of the systems that govern the flow of energy around the United Kingdom.
This role can be based from Wokingham or Warwick, and we continue to offer hybrid working from office and home.