Cyber Security Senior Specialist - Threat Hunter

Cyber Security Senior Specialist - Threat Hunter

Join the Phoenix Group as a Senior Cyber Security Specialist – Threat Hunter. This fixed‑term contract (15 months) role is based in Edinburgh, Telford or Birmingham with a hybrid working model.

Job Type: Fixed Term Contract – 15 months
Location: Edinburgh, Telford or Birmingham with on‑site and home working
Flexible working: Part‑time, job‑share and other flexibility options are available
Closing Date: 20/01/2026
Salary and benefits: £55,000 – £65,000 plus 16% bonus up to 32%, private medical cover, 38 days annual leave, excellent pension, 12x salary life assurance, career breaks, income protection, 3x volunteering days and more

Who we are: Phoenix Group is a FTSE 100 long‑term savings and retirement business, operating under brands such as Standard Life, Sun Life, Phoenix Life and ReAssure. We aim to be the best workplace for our 6,600 colleagues and are focused on sustainability, including net‑zero by 2050.

As a Senior Cyber Security Specialist within our Security Operations Centre, you will lead proactive threat detection and response using Microsoft Sentinel and Microsoft Defender, develop custom detection rules and automate playbooks, and collaborate closely with the Threat Intelligence team.

• Oversee continuous threat detection and response operations using Microsoft Sentinel and Microsoft Defender.
• Design, execute and optimise advanced threat hunting activities with KQL queries and telemetry from hybrid environments.
• Develop and implement bespoke detection rules and analytics across on‑premises and multi‑cloud infrastructures.
• Collaborate with Security Architecture to integrate new detection capabilities and ensure alignment with emerging threats.
• Provide technical support to project teams, aiding deployment of Sentinel analytics, Defender configurations and automated workflows.
• Maintain tooling, playbooks and detailed documentation for threat detection and response services.
• Support delivery of security services across on‑premise and multi‑cloud environments.
• Work with Security Architecture to develop and design new capabilities.

• In‑depth threat hunting experience.
• Extensive experience with Microsoft Sentinel and Microsoft Defender.
• Proficiency in KQL.
• Ideally Microsoft SC‑200 certification.

We’re committed to a diverse, inclusive workplace. If you bring unique experience that aligns with this role, we’d love to hear from you. Provide any necessary adjustments to the recruitment process.

Apply early – we review applications as they arrive. For more information, visit the Phoenix Group guide:

• Guide for Candidates:
• Contact us:

Referrals increase your chances of interviewing at Phoenix Group by 2x.