Cybersecurity Threat Hunter
Skills
Computer ScienceComputer ForensicsEDRMalware AnalysisMicrosoft SurfaceNetwork Traffic AnalysisObservation
What the job involves
The main requirements, responsibilities and hiring steps.
Requirements
- Hands-on experience hunting threat actor activity using EDR and/or SIEM platforms such as Microsoft Sentinel Splunk and CrowdStrike
- Ability to build and tune hunting and detection queries in platform-native languages such as KQL and SPL
- Excellent written and verbal communication skills for explaining technical findings to clients and teammates
- Working knowledge of threat actor techniques defense evasion and the current threat landscape
- Experience turning threat intelligence into deployable hunt and detection logic
- Familiarity with malware analysis techniques and the ability to interpret and apply results
- Network traffic analysis experience
- Experience with Windows environments with working familiarity across Linux and macOS
- Strong research and technical analysis skills
- Problem-solving interpersonal organizational skills and acute attention to detail
- Associate's degree or 2 or more years hands-on experience in a related field
Nice to have
- Analytical
- Client-facing
- Detail-oriented
- Organized
- Self-starter
- Mentoring mindset
Day to day
- Track emerging threat actor techniques from breaking research and threat intelligence and assess their relevance to client environments.
- Develop original research from observed malware and threat actor TTPs by extracting IOCs and identifying detection opportunities.
- Build and tune client-facing threat hunts across EDR and SIEM platforms while clearly communicating findings methodology and recommendations to clients.