Requirements
Requires a Bachelor's degree in Cybersecurity, Computer Science, or IT, with 3+ years of experience in Threat Hunting, Incident Response, SOC, Cyber Defense, or Advanced Security Operations. Must have hands-on experience with SIEM, EDR/XDR, network monitoring, threat intelligence, and security analytics, along with a strong understanding of MITRE ATT&CK and adversary TTPs.
Description
Job Summary Conduct proactive threat-hunting activities across digital and IT environments by analyzing system telemetry, network behavior, endpoint data, and threat intelligence to identify advanced and emerging threats. Support the detection, investigation, and containment of suspicious activities while strengthening the organization's overall cybersecurity posture.Key ResponsibilitiesConduct proactive threat-hunting investigations using endpoint, network, and security logs to identify indicators of compromise.Apply behavioral analytics, MITRE ATT&CK, TTP correlation, and anomaly detection techniques to identify suspicious activity.Leverage internal and external threat intelligence to develop and validate hunting hypotheses.Collaborate with SOC, Incident Response, Threat Intelligence, Cloud, Infrastructure, and Security Architecture teams to investigate and contain threats.Validate and tune detection rules to improve detection accuracy and reduce false positives.Identify gaps in existing security controls and recommend improvements to enhance detection and prevention capabilities.Document hunting activities, findings, indicators, and remediation recommendations in structured reports.Contribute to the development of threat-hunting playbooks, methodologies, and detection capabilities.Continuously develop technical expertise in threat hunting, adversary behavior, and advanced detection techniques.QualificationsBachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.Relevant cybersecurity certifications such as GCFA, GCTI, GCIH, GCIA, or equivalent are preferred.Experience3+ years of experience in Threat Hunting, Incident Response, SOC, Cyber Defense, or Advanced Security Operations.Hands-on experience with SIEM, EDR/XDR, network monitoring, threat intelligence, and security analytics.Strong understanding of MITRE ATT&CK, adversary TTPs, and incident investigation.