Threat Hunting Sr. Analyst

Responsibilities

• Conduct hunts focusing on relevant behavioral tactics, techniques, and procedures (TTPs)
• Contribute to detection engineering by implementing new detections from hunt outputs
• Support incident responders by applying expertise in advanced actors and TTPs
• Research new attack behaviors and emerging threat actor campaigns
• Develop threat hunting hypotheses in collaboration with threat intelligence teams
• Assist in maturing the threat hunting process through automation and new techniques
• Mentor the wider analyst team in threat hunting development
• Report findings and present technical information to senior stakeholders

Requirements

• 4-7 years of SOC experience in a large multi-national organization or MSSP
• At least 2 years of direct experience in threat hunting capabilities
• Deep understanding of cyber threats, attack vectors, and exploitation techniques
• Proficiency with Google Chronicle SIEM, CrowdStrike EDR/EPP, Vectra NDR, and Qualys VM
• Proficiency in query languages such as YARA, CrowdStrike QL, or SPS
• Expertise in the MITRE ATT&CK Framework
• Strong understanding of Windows, Linux, and network protocols
• Bachelor's degree in Computer Science, IT, Cybersecurity, or a related field

Preferred Qualifications

• Master's degree in a relevant field
• Relevant Cyber Security certifications such as CTIA, CREST PTIA, MITRE MAD, or CySA+