Threat Hunting- AM / DM

Role & responsibilities

Conduct proactive hypothesis-bases threat hunting activity to actively search for signs of malicious activity that may not be detected by traditional security systems.
•Utilize threat intelligence from various platform in scope to identify potential threats and understand adversary tactics.
•Developing hypothesis to perform threat hunts which will help to identify misconfiguration and contribute to redefine prevention & detection strategy for client
•Analyze log, system and user behavior from available logs in SIEM to identify anomalies and potential threats.

Preferred candidate profile

Create threat advisories to recommend mitigation strategies to address identified threats
•Understand the tactics, techniques, and procedures (TTPs) used by threat actors and APT groups for targeted attacks at the client's org.
•Conduct analysis on emerging threats and threat intelligence data to proactively identify potential risks.
•Participate with Clients Red Team, IT and CSIRT teams in threat hunting activities and provide feedback for Client’s SOC Content Development to create use case.
•Prepare and share daily threat intelligence advisories with classification, a weekly tactical advisory, and a fortnightly strategic advisory.
•Reports, dashboards and/or presentation on threat advisories and findings, including summary of hunting activities and actionable use cases on a monthly basis.