Skilled in identifying advanced threats and anomalies through proactive hunting techniques across endpoints, networks, and cloud environments
Proficient with EDR, SIEM, threat intelligence platforms, and using frameworks like MITRE ATT&CK for hypothesis-driven hunting
Strong capabilities in log analysis, behavioral analytics, and identifying indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs)
Works closely with SOC and IR teams to validate threats and improve detection capabilities
Experience with scripting languages (e.g., Python, PowerShell) to automate hunting tasks and enrich data
Certifications Preferred: GCTI, GCFA, or equivalent

Requirements

Bachelor's degree in computer science, Information Technology or related Subject
8+ Years of related experiences

المهارات المطلوبة

Threat hunting across endpoints, networks, and cloud environmentsEndpoint Detection and Response (EDR) proficiencySecurity Information and Event Management (SIEM) proficiencyThreat intelligence platform usageUse of MITRE ATT&CK for hypothesis-driven huntingLog analysisBehavioral analyticsIdentification of indicators of compromise (IOCs) and TTPsCollaboration with SOC and Incident Response teamsScripting for automation and data enrichment (Python, PowerShell)Threat intelligence certifications (e.g., GCTI, GCFA)Foundational computer science / IT knowledge (Bachelor's degree level)

وظائف مشابهة