Threat Hunter
New
Based in IndiaFull-TimeMiddle
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 5–10 years
- Required Skills
- Python
Requirements
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- 5–10 years of experience in cybersecurity, threat hunting, SOC operations, incident response, or related security roles.
- Strong hands-on experience with threat hunting methodologies, cyber threat intelligence, digital forensics, and malware analysis.
- Experience working with SIEM, EDR/XDR, and endpoint security platforms such as Microsoft Sentinel, Splunk, IBM QRadar, ArcSight, Microsoft Defender XDR, and CrowdStrike Falcon.
- Strong knowledge of MITRE ATT&CK Framework, IOC/IOA analysis, log analysis, and security telemetry investigation.
- Experience creating custom threat hunting queries, detection rules, and security analytics.
- Proficiency with Kusto Query Language (KQL), PowerShell, Python, and security automation practices.
- Strong understanding of Windows, Linux, Active Directory security, network protocols, and enterprise security architecture.
- Experience analyzing network traffic, including TCP/IP, DNS, HTTP, and SMTP protocols.
Responsibilities
- Conduct proactive threat hunting across enterprise networks, endpoints, cloud platforms, and hybrid environments.
- Identify Indicators of Compromise (IOCs), Indicators of Attack (IOAs), suspicious behaviors, and emerging attack patterns.
- Analyze security telemetry from SIEM, EDR/XDR, network monitoring, and cloud security platforms to uncover hidden threats.
- Investigate advanced persistent threats (APTs), ransomware attacks, insider threats, phishing campaigns, and zero-day vulnerabilities.
- Develop and execute hypothesis-driven threat hunting activities using threat intelligence and the MITRE ATT&CK framework.
- Perform malware analysis, digital forensics, and root cause investigations for complex security incidents.
- Create and optimize detection rules, analytics, queries, and use cases for security monitoring platforms.
- Automate repetitive threat hunting activities using scripting and security automation tools.
View Full Description & ApplyYou'll be redirected to the employer's site
