Description

Detect, investigate, and hunt threats across endpoints, networks, and cloud environments.

This role is on-site.

Responsibilities

• Conduct proactive threat hunting and deep-dive investigations into suspicious activity.
• Analyze security data from SIEM, EDR, and telemetry sources to identify IOCs and TTPs.
• Develop and fine-tune detection rules, alerts, and dashboards to improve visibility.
• Collaborate with threat intelligence teams to correlate internal findings with external data.
• Support vulnerability management by identifying and tracking security gap remediation.

Required Skills

• 3+ years of experience in threat hunting, SOC analysis, or cyber threat intelligence.
• Bachelor's degree in Cybersecurity, Computer Science, Information Security, or a related field.
• Experience with SIEM platforms including Sentinel and QRadar.
• Experience with EDR tools such as CrowdStrike and Defender.
• Working knowledge of email protection systems like Mimecast, Defender, or Purview.
• Strong understanding of the MITRE ATT&CK framework and kill chain models.
• Ability to parse and automate data using Python or PowerShell.

Preferred Skills

• CompTIA Security+, CySA+, or GIAC Security Essentials (GSEC).
• Certified SOC Analyst (CSA) or Microsoft SC-200 certification.

Key Skills

Education

Bachelor's degree