Threat Specialist

Company: DRW
Apply for the Threat Specialist
Location: London
Job Description:

Overview

In this Threat Specialist role, you will strengthen our Global Security Operations by triaging alerts, investigating incidents, and shaping detections. You’ll work with seasoned engineers, learn new security technologies, and influence the security posture across the organization. You’ll apply your analytical mindset to detect threats, automate responses, and educate colleagues while staying ahead of a rapidly evolving threat landscape. This London-based position offers mentorship, diverse toolsets, and hands-on impact in a high‑performing, technology-driven culture.

Responsibilities

  • Triage global security alerts from sources like IPS, Web Security, event logs, and EDR
  • Respond to incidents identified from alert analysis
  • Triage and route internal Security team tickets
  • Create and update threat detections
  • Administer SIEM for event correlation and threat detection
  • Manage SOAR playbooks, dashboards, and product configuration
  • Provide insider threat investigation support to internal stakeholders
  • Drive automated detection and response via scripting and programming
  • Evaluate commercial and open-source security tools as needed
  • Collaborate with Infosec peers to improve security posture
  • Contribute to internal documentation of standard processes and procedures
  • Educate users on security best practices
  • Assess security risks related to new projects and initiatives
  • Attend security conferences and trainings to stay ahead of threats

Key requirements

  • Bachelor’s degree, or 1–3 years of industry experience
  • Interest in digital forensics and physical security
  • Strong problem-solving mindset and attention to detail
  • Proficiency in Windows, MacOS, or Linux; willingness to learn other platforms
  • Knowledge of the Incident Response Cycle
  • Knowledge of static and dynamic malware analysis, including network captures
  • Knowledge of core networking and cloud security concepts
  • Experience with SIEM, EDR, and SOAR products
  • Experience with data analysis of security events
  • Experience with GitHub
  • Experience with PowerShell, Bash, Python, Ruby, or Perl
  • Excellent time management and communication skills
  • Problem solving
  • Attention to detail
  • Effective communication (verbal and written)
  • SIEM administration
  • SOAR playbook and dashboard management
  • EDR familiarity

…

Posted: October 1st, 2026