2-3 years of experience in threat hunting, intrusion analysis, or detections development. Familiarity with software development in C#, Python, or similar languages. Experience pivoting across the Diamond Model, Kill Chain stages, and MITRE ATT&CK. Ability to produce technical intelligence reports for operational teams. Knowledge of adversarial Threat Groups, including tactics, techniques, and procedures. Exposure to IOC development and network/malware analysis. Strong analytical and communication skills.