Description

You will conduct proactive threat hunting to identify malware, insider threats, and security hygiene issues within client environments.

Responsibilities

• Conduct proactive threat hunting using the SentinelOne platform to detect malicious behavior.
• Build and evolve hunting tooling, techniques, and use-cases for enhanced detection.
• Integrate threat intelligence and dark web data into daily hunting operations.
• Advise the engineering team on platform enhancements to support effective threat hunting.
• Work with clients to remediate identified threats and improve long-term security posture.

Required Skills

• 5+ years of experience in security engineering, SOC operations, or system administration.
• 5+ years in digital forensic investigations, penetration testing, red teaming, threat intelligence, or malware analysis.
• 2+ years of experience in endpoint-focused threat hunting.
• 3+ years of Python scripting experience, including API integration, DB integration, data manipulation, and multiprocessing.
• Ability to write code following Python best practices.
• Experience working with large datasets to extract actionable information.
• Strong understanding of common malware activity on endpoints and OS internals (Windows, Linux, OSX).
• Knowledge of the MITRE ATT&CK framework and known APT group activity.
• Experience utilizing EDR technologies and Cyber Threat Intelligence tools/data.
• Knowledge of OSINT tools and techniques.
• Working knowledge of git and experience working under a Scrum regime.

Preferred Skills

• Experience with the SentinelOne platform.

Key Skills

Education

Any Graduate