Description

Lead advanced threat hunting operations to proactively identify, investigate, and mitigate security threats across corporate environments.

This role is on-site.

Responsibilities

• Lead hunt missions to uncover malicious activity by analyzing command and control (C2) structures and developing network/host-based IOCs or IOAs.
• Investigate alerts for suspicious or malicious activity and support remediation efforts.
• Develop proactive threat hunting methodologies by defining search criteria to uncover undetected threats.
• Conduct root cause analysis and apply Digital Forensic and Incident Response (DFIR) processes to investigations.
• Collaborate with stakeholders to identify detection gaps and recommend security tools for impact assessment and mitigation.

Required Skills

• 5+ years of hands-on experience in SOC, Incident Response, Threat Intelligence, or Malware Analysis.
• Proficiency with EDR tools such as CrowdStrike or Microsoft Defender.
• Experience using Securonix, Snowflake, Python, Pandas, and SQL for large dataset analysis.
• Strong understanding of adversarial tactics, techniques, and procedures (TTPs) including APTs, Botnets, and Social Engineering.
• Knowledge of adversarial frameworks such as MITRE ATT&CK and the Lockheed Martin Cyber Kill Chain.
• Ability to use scripting and automation via Python, PowerShell, or PERL.
• Experience with detection tools and languages including Regular Expressions, YAARA, SIGMA rules, FQL, and KQL.
• Familiarity with SIEM, data lakes, and cloud platforms.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.

Preferred Skills

• Relevant certifications such as CISSP, GCIH, GCFA, Security+, or Network+.
• Cloud-specific certifications including AWS Certified Security - Specialty or Microsoft Azure Security Engineer Associate.

Key Skills

Education

Any Graduate