2-3 years of experience in threat hunting, intrusion analysis, or detections development Familiarity with software development in C#, Python, or similar languages Experience pivoting across the Diamond Model, Kill Chain stages, and MITRE ATT&CK Ability to produce technical intelligence reports for operational teams Knowledge of adversarial Threat Groups, including tactics, techniques, and procedures Exposure to IOC development and network/malware analysis