Cyber Threat Hunter

Job Description

We are seeking a highly motivated Cyber Threat Hunter to proactively identify, investigate, and mitigate advanced cyber threats across the organization’s environment. The ideal candidate will possess strong analytical skills, experience in threat hunting, incident response, and cybersecurity operations, and the ability to uncover malicious activities that evade traditional security controls.

As a Cyber Threat Hunter, you will work closely with Security Operations Center (SOC), Incident Response, Threat Intelligence, and Security Engineering teams to detect sophisticated threats, improve detection capabilities, and strengthen the organization’s overall security posture.

Key Responsibilities

• Proactively hunt for advanced threats and suspicious activities across enterprise networks, endpoints, cloud environments, and applications.
• Analyze security events, logs, network traffic, and endpoint telemetry to identify indicators of compromise (IOCs).
• Conduct investigations into potential security incidents and emerging cyber threats.
• Develop and execute threat hunting hypotheses based on threat intelligence and attack trends.
• Perform malware analysis and behavioral analysis to understand adversary tactics, techniques, and procedures (TTPs).
• Collaborate with SOC analysts and incident response teams to contain and remediate threats.
• Create detection rules, use cases, and threat-hunting playbooks.
• Utilize SIEM, EDR, XDR, and threat intelligence platforms to improve detection capabilities.
• Document findings and provide actionable recommendations to security leadership.
• Stay informed about evolving cyber threats, nation-state actors, ransomware groups, and industry attack trends.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.
• 3+ years of experience in Threat Hunting, Incident Response, SOC Operations, or Cybersecurity Analysis.
• Experience with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or LogRhythm.
• Strong knowledge of network protocols, operating systems, and cybersecurity principles.
• Experience with Endpoint Detection and Response (EDR) tools.
• Understanding of MITRE ATT&CK Framework and Cyber Kill Chain methodologies.
• Knowledge of malware analysis and threat intelligence techniques.
• Strong analytical, investigative, and problem-solving skills.
• Excellent written and verbal communication skills.

Preferred Qualifications

• Experience in cloud security (AWS, Azure, or Google Cloud).
• Knowledge of scripting languages such as Python, PowerShell, or Bash.
• Experience with digital forensics investigations.
• Familiarity with threat intelligence platforms and OSINT techniques.
• Experience hunting advanced persistent threats (APTs) and ransomware attacks.

Preferred Certifications

• CompTIA Security+
• CompTIA CySA+
• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Intrusion Analyst (GCIA)
• GIAC Cyber Threat Intelligence (GCTI)
• Certified Ethical Hacker (CEH)
• Certified Information Systems Security Professional (CISSP)

Technical Skills

• Threat Hunting
• Threat Intelligence
• Incident Response
• Digital Forensics
• Malware Analysis
• SIEM Platforms
• Splunk
• Microsoft Sentinel
• QRadar
• CrowdStrike Falcon
• Microsoft Defender
• Carbon Black
• MITRE ATT&CK
• Network Security
• Endpoint Security
• Python
• PowerShell
• Linux
• Windows Security

Benefits

• Competitive salary and annual performance bonus
• Medical, dental, and vision insurance
• Remote and hybrid work options
• Paid time off and company holidays
• Professional certification reimbursement
• Career advancement and training opportunities