Threat Hunter
Proactively search for attackers already inside the network - assume breach and prove it.
This UK threat hunter career guide covers what the role involves day to day, typical salary at each stage, the usual entry route, the skills employers expect, and related careers worth comparing.
Quick facts
- Starting salary
- £45,000 - £60,000
- Mid-career salary
- £70,000 - £100,000
- Senior salary
- £110,000 - £170,000
- Work environment
- Office or remote, desk-based
- Time to entry
- 1 - 3 years
- Degree required
- Helpful, not always required
- Category
- AI, Data and Automation
What a Threat Hunter does
Proactively search for attackers already inside the network - assume breach and prove it.
- Endpoint Hunting - Hunt across EDR telemetry for unknown threats.
- Network Hunting - Hunt in NetFlow, PCAP and Zeek logs.
- Cloud Hunting - Hunt in CloudTrail, Defender and GCP audit logs.
- Threat Intelligence-led Hunting - Hunt based on adversary TTP intelligence.
How to become a Threat Hunter
- Look up Threat Hunter roles on LinkedIn or Indeed and read 5 real job ads
- Talk to someone already working as a Threat Hunter - even a 15-minute call helps
- Find one beginner course or qualification used by people in this role
- Build one small piece of evidence you've explored this (project, shadowing, short course)
- Apply to one entry-level role or related opportunity within the next month
Key skills
- TTPs
- EDR tools
- Scripting
- Threat intel
- Curiosity