Cyber Threat Hunting

We are seeking a Cyber Threat Hunting - Assistant Manager with 3-7 years of experience in threat hunting, SOC analysis, incident response, or threat intelligence. Ideal candidates will have a strong background in network protocols, malware behavior, and Windows/Linux internals. Hands-on experience with SIEM tools (QRadar, Splunk, or Sentinel) and EDR platforms (CrowdStrike, Carbon Black, Defender) is essential. Familiarity with MITRE ATT&CK, Cyber Kill Chain, and IOC analysis is a must.

Candidates should possess strong analytical skills to interpret large datasets and identify anomalies. Proficiency in scripting (Python, PowerShell, or Bash) for automation or data enrichment is preferred. Exposure to cloud security (AWS, Azure, GCP) is a plus. A bachelor's degree in information security, Computer Science, or a related field is required, with a master's in business management being advantageous.

In this role, you will conduct proactive threat hunting using logs, network traffic, and endpoint data. Develop and test hypotheses based on emerging threat intelligence, analyze IOCs, and correlate data across SIEM, EDR, firewall, network, and cloud logs. Create detection logic and custom rules to enhance threat visibility in SIEM tools. Work closely with SOC and IR teams to respond to and contain threats, document findings, and improve detection playbooks. Stay updated on cyber threat trends, APT campaigns, and new attack methodologies.