Security Threat Hunting Specialist
About this job
WPP is a trusted growth partner for leading global brands, uniting media intelligence, data solutions, creativity, production, and enterprise solutions powered by exceptional talent and the WPP Open platform. As a Security Threat Hunting Specialist, your primary mission is to proactively uncover advanced threats that bypass standard security defenses. The company operates across more than one hundred markets and values a collaborative, inclusive culture. A normal day in this role involves conducting hypothesis-driven investigations, analyzing telemetry data from diverse environments, developing automated queries, and collaborating closely with security operations and incident response teams. You will utilize threat intelligence and frameworks to reduce dwell times, address visibility gaps, and contribute to the evolution of agile security workflows within a hybrid work model.
Responsibilities
- Run hypothesis-driven threat hunts leveraging adversary tactics and threat intelligence.
- Examine security telemetry across endpoints, networks, and cloud platforms for anomalies.
- Build and update automation scripts and hunting queries to ensure repeatable processes.
- Participate in purple team activities and adversary emulation to test detection coverage.
- Integrate new threat intelligence feeds into detection pipelines and hunting hypotheses.
- Record hunt discoveries and share insights to improve SOC workflows and detection engineering.
- Automate security operations workflows using scripting and SOAR platforms.
Requirements
- Deep understanding of threat hunting frameworks and techniques like MITRE ATT&CK and TaHiTI.
- Demonstrated experience using SIEM, EDR/XDR, and log aggregation tools in hybrid setups.
- Programming capabilities in Python or PowerShell for data analysis and automation tasks.
- Understanding of behavioral analytics and threat intelligence integration.
- Experience collaborating with security operations, incident response, and engineering teams.
- Strong documentation skills to record hunt outcomes and communicate technical findings clearly.
- Analytical and problem-solving mindset focused on automation, scale, and resilience.
Good to have
- GIAC GCTI certification
- GCIH certification
- Equivalent advanced information security certifications
Who should apply
This role is ideal for cybersecurity professionals with a strong background in threat hunting, incident response, or security operations who enjoy proactive investigations. Applicants should possess solid scripting skills and familiarity with hybrid infrastructure telemetry. The posting does not mention if freshers can apply, so experienced security specialists are best suited for this position.
Frequently asked questions
What is the primary goal of the Security Threat Hunting Specialist at WPP?
The specialist is responsible for proactively finding hidden threats that evade standard security controls to reduce dwell time.
What tools and technologies will I use as a Security Threat Hunting Specialist at WPP?
You will use SIEM, EDR/XDR, NDR, cloud-native platforms, SOAR tools, and scripting languages like Python or PowerShell.
What is the work model for the Security Threat Hunting Specialist position at WPP?
WPP follows a hybrid work approach where teams are typically in the office around four days a week.
Are certifications required for the Security Threat Hunting Specialist role at WPP?
Advanced security certifications such as GIAC GCTI or GCIH are preferred but listed under preferred qualifications.
Rojgar Point lists this job for information. Always apply on the official company page and never pay anyone for a job.