Description

You will lead proactive threat hunting missions to identify malicious activity, insider misconduct, and anomalous behavior across corporate environments.

This role is on-site.

Responsibilities

• Lead hunt missions leveraging threat intelligence and multi-source data to uncover undetected threats.
• Develop and execute proactive hunting methodologies, defining search criteria and identifying Indicators of Compromise (IOCs) or Indicators of Attack (IOAs).
• Investigate security alerts and conduct root cause analysis to support remediation and improve security posture.
• Identify detection gaps and collaborate with stakeholders to enhance security controls and processes.
• Mentor team members on technical capabilities and best practices in threat detection.

Required Skills

• 4+ years of experience in cybersecurity roles such as SOC, Incident Response, Threat Intelligence, or Malware Analysis.
• Proficiency with Endpoint Detection and Response (EDR) tools, specifically CrowdStrike and Microsoft Defender.
• Hands-on experience with SIEM and threat intelligence platforms including Securonix, Microsoft Sentinel, Palo Alto XSOAR, ThreatConnect, and Recorded Future.
• Experience with large dataset and log analysis using Snowflake, Python, Pandas, and SQL.
• Technical proficiency in scripting languages including Python, PowerShell, or Perl.
• Strong understanding of adversarial frameworks such as MITRE ATT&CK and the Lockheed Martin Cyber Kill Chain.
• Ability to use Regular Expressions, YARA, SIGMA rules, FQL, and KQL.
• Foundational knowledge of Digital Forensics and Incident Response (DFIR) processes.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.

Preferred Skills

• Advanced degree in a technical field.
• Certifications such as CISSP, CISM, GCIH, GCFA, Network+, Security+, or cloud-specific credentials like AWS Certified Security - Specialty or Microsoft Certified: Azure Security Engineer.

Key Skills

Education

Bachelor's degree