analyzing, and mitigating potential cyber threats before they cause damage.

Key Responsibilities

Proactively hunt for threats across networks, endpoints, servers, and cloud environments
Analyze logs, alerts, and telemetry from SIEM, EDR, NDR, and other security tools
Identify Indicators of Compromise (IOCs) and Indicators of Attack (IOAs)
Conduct hypothesis-driven threat hunting and behavioral analysis
Investigate advanced persistent threats (APTs), insider threats, and zero-day attacks
Collaborate with SOC Analysts, Incident Response, and Blue Team for remediation
Develop and improve detection rules, use cases, and playbooks
Document findings and provide threat intelligence reports
Stay updated with emerging threats, attacker TTPs, and MITRE ATT&CK techniques

Required Skills

Strong understanding of networking, operating systems (Windows/Linux), and security concepts
Hands-on experience with SIEM tools (Splunk, QRadar, Sentinel, etc.)
Experience with EDR/XDR solutions (CrowdStrike, Defender, Carbon Black, etc.)
Knowledge of MITRE ATT&CK framework
Log analysis and threat intelligence correlation
Scripting skills (Python, PowerShell, Bash – preferred)
Incident response and malware analysis basics

Preferred Qualifications

Threat Hunter - SOC