Senior Threat Hunter

Our products, platforms and technologies are constantly evolving that's why keeping Sky safe from cyber attacks is one of our top priorities. Our Cyber Security team helps the business grow while protecting our customers, colleagues and partners from increasingly sophisticated cyber threats. Our team includes Cyber Fusion Centre, Security Services, Risk and Compliance, Programme Delivery and Business Security, and we work across the UK, Italy and Germany. Join us and you'll get involved in tackling challenges and future threats in an ever changing cyber landscape.

You will join our comprehensive Cyber Defence Department as a senior member of the dedicated Threat Hunt team. You will operate within a robust security ecosystem, partnering directly with Cyber Operations, Threat Intelligence, Engineering, and Threat Vulnerability Management.

• Conduct proactive threat hunts across the enterprise, broadcast, and telco networks to identify abnormal activity, emerging attack techniques, and advanced threats.
• Develop and execute hypothesis driven threat hunts utilising datasets across a variety of security tooling, including EDR, SIEM, and network layer defences.
• Collaborate directly with the Cyber Threat Intelligence team to operationalise intelligence, maintaining and refining hunting playbooks for priority threat actors and relevant TTPs.
• Partner with security engineering teams to translate hunt findings into productionised, high fidelity detections and drive continuous improvement in data source coverage and quality.
• Act as a technical mentor within the Cyber Defence function, guiding junior analysts, conducting peer reviews, and fostering a culture of continuous learning.
• Document and communicate hunt outcomes comprehensively, translating complex technical findings into actionable remediation strategies and executive level summaries.

• Extensive prior experience in threat hunting at a large enterprise environment.
• Experience with incident response, SOC, or detection engineering.
• Deep understanding of the MITRE ATT&CK framework and how to practically apply it to threat hunting methodologies and detection logic.
• Proficiency in complex query writing (e.g., KQL, SPL, SQL) to filter, analyse, and visualise large, disparate datasets.
• Hands on experience with EDR, NDR, SIEM, SOAR security platforms and data analysis platforms such as Databricks.
• Strong investigative acumen combined with a curious, highly analytical mindset capable of navigating ambiguity.
• Proven ability to work cross functionally, bridging the gap between security and broader technology teams to demonstrably improve the overall security posture.

• Scripting and automation capabilities, particularly utilising Python, PySpark, and SQL to streamline analytical workflows.
• Experience navigating cloud native security environments (AWS, Azure, or GCP) alongside familiarity with the Microsoft 365 ecosystem.
• Advanced knowledge of offensive security methodologies, including common exploit chains, reverse engineering basics, or penetration testing techniques.
• Relevant industry certifications demonstrating specialised knowledge in threat hunting, incident response, or forensics (e.g., SANS GCIA, GCIH, GCFA, OSCP).

• Free SkyTV or NOW package, including Sky Sports and Sky Cinema
• Pension package with up to 9% employer contribution
• Private healthcare with mental health support
• Aviva Digital GP and dental insurance
• Discounts on Sky products, including Sky Mobile, Sky Broadband, Sky Glass and Sky Protect
• Sharesave and Tech schemes
• A range of Sky VIP rewards and experiences

The hybrid working expectations for this role are 2 days in the office per week.

Our Sky Group HQ. Equipped with state of the art technology and workspaces, there's plenty of space to see your big ideas come to life. Here you'll find 13 subsidised restaurants and cafes. You can re energise at our gym, catch the latest films at our cinema, get your car washed and even get pampered at our beauty salon.

Our Osterley Campus is just a 10 minute walk from Syon Lane train station, or you can get one of our free shuttle buses from Osterley, Gunnersbury and Ealing Broadway stations. Plus, there's free onsite parking available for cars, motorbikes and bicycles.

We're an equal opportunity employer and value diversity at our company. We're a Disability Confident Accredited Employer, and welcome and encourage applications from all candidates. We will look to ensure a fair and consistent experience for all and will make reasonable adjustments to support you where appropriate. Please flag any adjustments you need as early as you can.