{"id":3198097,"url":"https://alion.io/job/accenture-threat-hunting-detection-analyst","title":"Threat Hunting & Detection Analyst","company":{"id":271,"name":"Accenture","domain":"accenture.com","url":"https://alion.io/company/accenture","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":100,"open_postings":2108,"ghost_share":0.001,"stale_share":0.157,"repost_share":0.006,"time_to_fill_p50_days":5,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":72000,"max_usd":164000,"period":"year","method":"role_country_seniority_unknown","sample_n":159},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Crowdstrike","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-10-22T00:00:00Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-11-02T12:24:52Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":11},"description":"Role: Threat Hunting & Detection Analyst\nLocation: Cheltenham (hybrid- 1x a month office attendance)\nPosition: Specialist / Senior Analyst\nPlease Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance which requires 5 years continuous UK address history (typically including no periods of 30 consecutive days or more spent outside of the UK) at the point of application.\nThe above information relates to a specific client requirement'\nAbout the team:\nAs a member of the SOC Content Team, you will be responsible for contributing to the creation, deployment, and tuning of threat detection content and delivery of proactive threat hunting. You will work in close partnership with client Lead Analysts, threat intelligence teams, and other SOC functions to help ensure that detection strategies are tailored to each client’s threat profile and security objectives.\nThis role offers a balance of technical hands-on work, collaboration, and knowledge sharing, with a strong emphasis on continual learning and process improvement.\nCareer Level & Experience\nWe recognise that strong cyber security professionals may come from a variety of backgrounds and may not have experience across every area listed in this role profile.\nWe are open to considering candidates at different stages of their careers, from developing practitioners through to experienced specialists. Candidates with strengths in Threat Hunting, Detection Engineering, SOC Operations, or Security Monitoring & Incident Response are encouraged to apply.\nYou do not need to meet every requirement listed below. If you have strong experience in one or more of these areas and are keen to develop your expertise across the wider detection and threat hunting lifecycle, we would welcome your application. The level and responsibilities of the role will be aligned to your skills, experience, and potential.\nKey Responsibilities:\nThreat Detection Use Case Development\nDesign and implement detection logic aligned to specific threat scenarios using frameworks such as MITRE ATT&CK. \nDevelop, test, deploy, and tune detection content throughout its lifecycle. \nWork closely with Client Lead Analysts to ensure detection content remains relevant and effective for client environments. \nProactive Threat Hunting\nConduct hypothesis-driven threat hunts using client telemetry, threat intelligence, and observed anomalies. \nAnalyse available data sources to identify suspicious or malicious activity that may evade existing detections. \nDocument and present findings in a clear, actionable format for both internal teams and clients. \nContent QA and Maintenance\nReview and validate detection content prior to deployment. \nMaintain and update runbooks, SOPs, and detection playbooks to reflect evolving threats, tooling, and client requirements. \nSupport quality assurance activities to ensure consistency, accuracy, and effectiveness of delivered content. \nCollaboration & Knowledge Sharing\nCollaborate with SOC, Threat Intelligence, and Engineering teams to enhance detection strategies. \nShare findings, insights, and best practices through documentation, workshops, and knowledge-sharing sessions. \nContribute to continuous improvement initiatives across the wider security operations function. \nSkills & Experience:\nExperience with SIEM platforms such as Microsoft Sentinel, Splunk etc \nPrevious experience working in aSOC, Threat Hunting, Detection Engineering, or Cyber Security Operations environment. \nExperience developing, testing, and tuning threat detection use cases. \nGood understanding of the MITRE ATT&CK framework and common threat actor tactics, techniques, and procedures (TTPs). \nExperienceconducting proactive threat hunting and analysing security telemetry. \nStrong analytical, investigation, and communication skills. \nAbility to collaborate effectively with SOC analysts, threat intelligence teams, and other security stakeholders. \nExperience in EDR tooling such as CrowdStrike & Microsoft Defender-desirable.\nAbout Accenture\nAccenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services-creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.Visit us atwww.accenture.com\nEqual Employment Opportunity Statement\nWe believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, sexual orientation, gender identity or expression, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.","description_format":"text","description_chars":5744,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Incident Response","Systems Integrators","Business Process Outsourcing (BPO)"],"lifecycle":[{"event":"open","at":"2026-10-24T05:57:53Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Senior or Specialist Worker, Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Business Mobility: Senior or Specialist Worker; Skilled Worker","cap_exempt":false,"checked_at":"2026-10-31T06:23:40+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":17,"band":"cold","label":"Long shot","p_open":1,"p_active":0.48,"p_room":0.35,"age_days":11,"expected_fill_days":5,"reasons":["conf:1","velocity","win:tail","comp:brand"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/accenture-threat-hunting-detection-analyst","json_url":"https://alion.io/job/accenture-threat-hunting-detection-analyst.json","meta":{"generated_at":"2026-11-02T12:36:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17250,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":271},"rest":"https://alion.io/mcp/rest/get_company?id=271"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faccenture-threat-hunting-detection-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faccenture-threat-hunting-detection-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faccenture-threat-hunting-detection-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/accenture-threat-hunting-detection-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faccenture-threat-hunting-detection-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3198097}},{"tool":"search_jobs","arguments":{"company":"accenture.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3198097},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}