detection engineering, threat intelligence & threat hunting analyst

detection engineering, threat intelligence & threat hunting analyst Jobs in Kharian

detection engineering threat intelligence threat hunting analyst

ACE Money Transfer

<div><div><h1 class="jobSectionHeader"><b>About Us:</b></h1><p>
ACE Money Transfer is a UK-based company headquartered in Manchester, United Kingdom. The company is an online remittance service provider for customers in the UK, Canada, Australia, and the European Union, including Switzerland. The company is the parent company of a group of companies with a diversified portfolio, including digital wallet services in the UK, as well as real estate, advertising businesses, and software solutions in Pakistan.</p><h1 class="jobSectionHeader"><b>
ROLE OVERVIEW</b></h1><p>
A junior-to-mid-level specialist role supporting ACE Money Transfer's security operations function across three areas: keeping the SIEM healthy and well-tuned, tracking threats relevant to ACE's environment, and proactively looking for signs of compromise that automated alerts may miss. The role is well-suited to someone with 1&ndash;2 years of SOC or security analyst experience who wants to grow beyond reactive alert triage into detection, intelligence, and hunting work.</p><h1 class="jobSectionHeader"><b>
KEY RESPONSIBILITIES</b></h1><ul><li>
Monitor and fine-tune SIEM alerts, reduce noise, adjust thresholds, and flag rules that are generating too many false positives.</li><li>
Write and update basic SIEM detection rules for common attack patterns, guided by MITRE ATT&amp;CK and with support from the wider team.</li><li>
Keep ACE's IOC list up to date by adding new malicious IPs, domains, and file hashes from threat feeds and ensuring they are blocked in SIEM and WAF.</li><li>
Monitor threat intelligence sources (NCSC, CISA, vendor advisories) for CVEs or attack techniques relevant to ACE's tools, cloud platform, M365, EDR/XDR, SIEM, and MFA platform, and summarise findings for the team.</li><li>
Run structured threat hunts using SIEM and EDR/XDR platforms to look for suspicious behaviour that alerts have not flagged, using playbooks and hypotheses provided or agreed with the manager.</li><li>
Document hunt activity and detection changes clearly, including what was searched, what was found, and any rules created or updated as a result.</li><li>
Support post-incident reviews by checking logs for signs of earlier attacker activity or missed indicators.</li><li>
Assist the SOC team by sharing relevant threat updates and flagging anything unusual identified during intelligence or hunting activities.</li></ul><h1 class="jobSectionHeader"><b>
REQUIRED SKILLS &amp; EXPERIENCE</b></h1><ul><li>
1&ndash;2 years of experience in a SOC, security analyst, or IT security role.</li><li>
Basic familiarity with SIEM or any SIEM platform, including understanding how alerts are generated and what log data looks like.</li><li>
Awareness of the MITRE ATT&amp;CK framework and common attack techniques.</li><li>
Ability to read and interpret security logs across endpoint, cloud, or identity sources.</li><li>
CompTIA Security+ or any equivalent certification.</li></ul><h1 class="jobSectionHeader"><b>
DESIRABLE</b></h1><ul><li>
Hands-on exposure to SIEM rule writing, Sigma rules, or query language queries.</li><li>
Familiarity with threat intelligence feeds or platforms (even free ones such as threat intelligence platforms, threat intelligence feeds, or similar resources).</li><li>
Basic Python or PowerShell scripting skills for simple automation tasks.</li><li>
Interest or coursework in threat hunting, detection engineering, or cyber threat intelligence.</li></ul><h1 class="jobSectionHeader"><b>
COMPETENCIES</b></h1><ul><li>
Curious and self-motivated, with a genuine interest in understanding how attacks work, not just closing tickets.</li><li>
Organised and detail-oriented, maintaining clear records of what was checked and what was found.</li><li>
Good communicator, able to explain a threat or finding clearly in writing to colleagues who were not involved.</li><li>
Collaborative and comfortable asking questions, sharing findings, and working as part of a small team.</li></ul><h1 class="jobSectionHeader"><b>
REQUIRED SKILLS &amp; EXPERIENCE</b></h1><ul><li>
1&ndash;2 years of experience in one or more of the following: detection engineering, threat intelligence, threat hunting, or senior SOC analyst roles.</li><li>
Hands-on expertise with SIEM rule authoring, decoder development, SIEM query interface querying, and log source integration.</li><li>
Proficiency in SIEM query languages, SIEM query language, or query language for hunt execution and detection development.</li><li>
Strong working knowledge of MITRE ATT&amp;CK and hands-on experience mapping TTPs to detection coverage and gap analysis.</li><li>
Demonstrated experience producing structured threat intelligence outputs, including IOC feeds, TTP briefings, and advisory reports.</li><li>
Familiarity with threat intelligence platforms, threat intelligence platforms, threat intelligence platforms, or equivalent solutions.</li><li>
Understanding of endpoint, cloud, network, and identity telemetry and how adversaries move across these layers.</li><li>
One or more certifications: CompTIA CySA+, Certified Threat Hunting Professional (THP), or equivalent.</li></ul><h1 class="jobSectionHeader"><b>
DESIRABLE</b></h1><ul><li>
Experience authoring Sigma rules and converting them to platform-specific detection formats.</li><li>
Familiarity with EDR/XDR platform Live Discover for custom hunt queries and behavioural analysis.</li><li>
Knowledge of dark web monitoring tooling and OSINT frameworks, OSINT platforms, OSINT tools, or equivalent solutions.</li><li>
Scripting capability in Python, query language, or Bash for IOC ingestion automation, hunt query execution, or SIEM integration development.</li><li>
Understanding of STIX/TAXII for structured threat intelligence sharing.</li><li>
Experience in a regulated financial services environment (FCA, PCI DSS v4.0.1, DORA, UK-GDPR).</li><li>
Familiarity with FS-ISAC feeds or equivalent financial sector threat intelligence communities.<br>
<br>
ACE Money Transfer Profile: https://acemoneytransfer.com/company-profile</li></ul></div><p>
</p><p>qEn4eplzix</p></div>

Detection Engineering, Threat Intelligence & Threat Hunting Analyst

<div>
 <strong>
  About Us:
  <br/>
  <br/>
 </strong>
 ACE Money Transfer is a UK-based multinational company headquartered in Manchester, United Kingdom. ACE Money Transfer provides online remittance services to individuals in 29 countries across the UK, Europe, Canada, and Australia, enabling them to send money across borders in over 100 countries.
 <br/>
 <br/>
 <strong>
  Role Overview
  <br/>
  <br/>
 </strong>
 First-line SOC analyst responsible for real-time monitoring and alert triage across SIEM, EDR/XDR platform, and MDM platform. Operates within a 24/7 shift model, escalating validated threats to L2 and maintaining accurate incident records throughout.
 <br/>
 <br/>
 <strong>
  Key Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Monitor and triage alerts from SIEM, EDR/XDR platform, and MDM platform during assigned shift windows
  </li>
  <li>
   Classify alert severity, identify false positives, and document findings with structured case notes
  </li>
  <li>
   Escalate confirmed or suspected incidents to L2 with a clear summary of indicators, affected assets, and timeline
  </li>
  <li>
   Execute ACE Incident Response Playbooks phishing, brute force, endpoint isolation, device compliance failure
  </li>
  <li>
   Conduct basic log analysis across endpoint, cloud (cloud platform), M365, and identity (Identity platform / MFA platform) sources via SIEM
  </li>
  <li>
   Maintain shift handover documentation and communicate open incidents to the incoming analyst
  </li>
  <li>
   Support compliance reporting where security events intersect with FCA, UK-GDPR, CBI, or PCI DSS obligations
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Required Skills &amp; Experience
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   1&ndash;2 years in a SOC, IT security, or helpdesk security role
  </li>
  <li>
   Familiarity with SIEM or equivalent SIEM; awareness of EDR/XDR and MDM platforms
  </li>
  <li>
   Basic knowledge of MITRE ATT&amp;CK, networking protocols, and log analysis
  </li>
  <li>
   CompTIA Security+, CySA+
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  DESIRABLE
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Hands-on experience with EDR/XDR platform, MDM platform, or WAF
  </li>
  <li>
   Basic Python or PowerShell scripting
  </li>
  <li>
   Financial services or fintech sector background
   <br/>
   <br/>
  </li>
 </ul>
 ACE Money Transfer Profile: https://acemoneytransfer.com/company-profile
 <br/>
 <br/>
 Powered by JazzHR
 <br/>
 <br/>
 VJK53L1utn
</div>


L1 SOC Analyst

Explore 2+ Detection engineering threat intelligence threat hunting analyst in Kharian this July. Find roles across top companies and apply now to boost your career.

2 detection engineering threat intelligence threat hunting analyst jobs In Kharian

Detection Engineering, Threat Intelligence & Threat Hunting Analyst

L1 SOC Analyst