Threat Hunter/Threat Detection Specialist

Dublin, Dublin

  Cyber Skills and Specializations

Contract

Threat Hunter / Threat Detection Specialist
Location: Dublin, Ireland (Hybrid)
Contract Duration: 6–12 months, with possible extension
Hours: Full-time (40 hours/week)
Rate: Competitive & depending on experience

Our client, a global consulting firm, are hiring an experienced Threat Hunting & Threat Detection Specialist to join their growing cyber security practice on a contract basis. The successful candidate will leverage their background in SOC operations and advanced detection engineering to proactively identify, investigate and neutralise threats across enterprise environments.

Responsibilities

  • Lead proactive threat hunting to uncover malicious activity, anomalous behaviour and emerging threats.

  • Develop and maintain detection logic, use cases and playbooks within SIEM and threat detection platforms.

  • Analyze security event data and continuously enhance detection capabilities.

  • Collaborate with SOC teams to strengthen incident response workflows and knowledge transfer.

  • Deliver expert advice on threat detection strategy, tooling optimisation and security maturity.

  • Produce clear documentation, actionable intelligence and present findings to both technical and business stakeholders.

  • Mentor analysts progressing from SOC roles into advanced detection and hunting functions.

Skillset

  • 3-7 years of experience in cybersecurity, with at least two years in threat hunting/detection.

  • Strong background in SOC operations with proven progression into threat hunting and detection engineering.

  • Experience mentoring SOC analysts or contributing to advanced detection practices.

  • Extensive Splunk expertise (search queries, dashboards, detection rules, alert optimisation).

  • Experience with SIEM, EDR, or XDR tools (e.g. Sentinel, QRadar, CrowdStrike, Carbon Black).

  • Familiarity with MITRE ATT&CK framework and adversary TTPs.

  • Scripting or automation (Python, PowerShell, Bash) desirable.

  • Proven ability to build or enhance detection frameworks.

  • Relevant certifications advantageous (e.g. GCFA, GCTI, GCDA, Splunk Certified, Security+).

54894