Are you ready to shape a better tomorrow?

• Develop, document, and maintain the Cyber Threat Hunting Framework.
• Hunt and identify threat actor groups, techniques, tools, and procedures (TTPs).
• Perform threat hunting through analysis of anomalous log data to detect and mitigate cyber threats.
• Develop threat hunting hypotheses, translate hunting activities into an iterative process, and automate threat hunting activities where possible.
• Review alerts generated by security monitoring tools and recommend enhancements to improve monitoring efficiency.
• Conduct forensic analysis of:
  • Network packet captures
  • DNS logs
  • Proxy logs
  • Malware artifacts
  • Host-based security logs
  • Application logs
  • Other relevant data sources
• Provide expert investigative support during large-scale and complex security incidents.
• Analyze security incidents and recommend enhancements to security monitoring and alert catalogs.
• Investigate and validate suspicious events using both open-source and proprietary intelligence sources.
• Document and communicate findings effectively to both technical and executive audiences.
• Continuously improve processes, use cases, and capabilities within security monitoring tools.
• Stay current with information security news, threat landscapes, emerging adversary techniques, and cyber threat intelligence trends.
• Support day-to-day Cyber Threat Intelligence (CTI) operations and ensure efficient service delivery.
• Participate in strategic initiatives, security-related projects, and additional support activities as required.

Experience

• Minimum of 5 years of experience in a technical cybersecurity role, specifically in one or more of the following areas:
  • Cyber Threat Intelligence (CTI)
  • Cyber Threat Hunting
  • Purple Teaming
  • Red Teaming

Certifications

• Relevant cybersecurity certifications such as:
  • GCTI (GIAC Cyber Threat Intelligence)
  • CCIP
  • CIA

Technical Knowledge & Skills

• Experience researching and integrating Cyber Threat Intelligence findings into threat hunting workflows.
• Strong knowledge and practical experience with:
  • MITRE ATT&CK Framework
  • Cyber Kill Chain Model
  • Diamond Model
• Proficiency in using:
  • Threat Intelligence Platforms (TIPs)
  • Open-Source Intelligence (OSINT) tools
• Understanding of:
  • Malware analysis
  • Threat actor behaviors
  • Network protocols and applications
• Experience with incident response processes, including:
  • Detection of advanced threats and adversaries
  • Log analysis
  • Malware triage
• Strong understanding of:
  • Network protocols
  • System vulnerabilities
• Experience developing detection signatures using:
  • YARA
  • SNORT
• Highly capable of producing:
  • Threat Advisories
  • Threat Intelligence Reports
  • Executive-level security briefings for senior management in a timely manner.