Security Threat Hunting Specialist

Overview

Proactively identify advanced threats that evade traditional security controls through hypothesis-driven investigations, threat intelligence, and telemetry analysis across endpoints, networks, and cloud environments.

What you'll do

• Execute hypothesis-driven hunts based on adversary TTPs and threat intelligence.
• Analyze telemetry from SIEM, EDR/XDR, NDR, and cloud-native platforms to identify anomalies.
• Develop and maintain hunting queries and scripts for automation and repeatability.
• Validate detection coverage through purple team exercises and adversary emulation.
• Incorporate emerging threat intelligence into hunting hypotheses and detection pipelines.
• Maintain awareness of global threat actor tactics, techniques, and procedures (MITRE ATT&CK).
• Document hunt findings and feed insights into detection engineering and SOC workflows.
• Maintain a backlog of hunting hypotheses and visibility gaps for remediation.
• Contribute to automation of hunting workflows using scripting and SOAR platforms.

What you'll need

• Strong knowledge of threat hunting methodologies and frameworks (MITRE ATT&CK, TaHiTI).
• Proficiency in SIEM, EDR/XDR, and log aggregation tools across hybrid infrastructure.
• Scripting skills (Python, PowerShell) for automation and data analysis.
• Familiarity with threat intelligence integration and behavioral analytics.
• Ability to work closely with SOC, IR, and engineering teams.
• Skilled in documenting hunt outcomes and communicating findings effectively.

Nice to have

• GIAC GCTI, GCIH, or equivalent advanced security certifications.

Details

• Location: India.
• Work mode: Hybrid, with teams in the office around four days a week.