Description

You will lead incident response, threat hunting, and intelligence operations across hybrid infrastructure.

This role is remote.

Responsibilities

• Orchestrate CSIRT activities and manage end-to-end incident response lifecycles.
• Conduct proactive threat hunting and digital forensics to identify and mitigate risks.
• Perform malware analysis and maintain threat intelligence feeds using MITRE ATT&CK frameworks.
• Manage and tune SIEM (Splunk, Sentinel, QRadar) and EDR/XDR (CrowdStrike, Defender, SentinelOne) platforms.
• Develop automation scripts in Python, PowerShell, and Bash for Windows/Linux and cloud environments.

Required Skills

• 8+ years of cyber security experience with deep expertise in Incident Response and Threat Intelligence.
• Proficiency in SIEM tools: Splunk, Microsoft Sentinel, or IBM QRadar.
• Experience with EDR/XDR solutions: CrowdStrike, Defender, or SentinelOne.
• Strong knowledge of MITRE ATT&CK, Digital Forensics, and Malware Analysis.
• Hands-on skills in Python, PowerShell, and Bash scripting.
• Operational experience in AWS, Azure, and GCP cloud environments.
• Solid understanding of Windows/Linux systems and Active Directory.

Preferred Skills

• Experience leading CSIRT teams in a high-volume incident environment.
• Advanced threat hunting methodologies and automation of detection rules.

Key Skills

Education

Any Graduate