Threat Hunter
2 weeks ago
At Optiv, we’re on a mission to help our clients make their businesses more secure. We’re one of the fastest-growing companies in a truly essential industry.
In your role at Optiv, you’ll be inspired by a team of the brightest business and technical minds in cybersecurity. We are passionate champions for our clients and know from experience that the best solutions for our clients’ needs come from working hard together. As part of our team, your voice matters, and you will do important work that has an impact, on people, businesses, and nations. Our industry and our company move fast, and you can be sure that you will always have room to learn and grow. We’re proud of our team and the important work we do to build confidence for a more connected world.
**Responsibility**:
- Analyze, document and report on potential security incidents identified in customer environments
- Work with partners to maintain an understanding of security threats, vulnerabilities, and exploits that could impact systems, networks, and assets
- Act as a coordinator for security events that require urgent response, containment and remediation
- Perform knowledge transfers, document and train clients regarding mitigation of identified threats
- Provide ongoing recommendations to other MSS peers and customers on tuning and best practices
- Actively research current threats and attack vectors being exploited in the wild
- Actively work with associate analysts and perform investigations on escalations
- Ability to discuss security posture with multiple clients and make recommendations to better their holistic security approach
- Act as lead during assigned shifts
- Maintain and develop SOP’s and KB’s
**Qualifications**:
- Seven or more years of full-time professional experience in the Information Security field
- Experience working in a Security Operations Center (SOC), Managed Security Service (MSS), or Managed Detection and Response and Threat Hunting
- Excellent time management, reporting, and communication skills
- Ability to generate comprehensive written reports and recommendations
- Coaching and training experience
- Ability to create, maintain and deliver trainings to the rest of the team
- Previous experience as a point of escalation in a technical environment
- Customer interactions and creation of executive presentations
- Understanding of contemporary security architectures/devices such as firewalls, routers, switches, load balancers, remote access technologies, anti-malware, SIEM, and AV
- Ability to work with stakeholders to better develop specific environments to report on critical security events
- Ability to troubleshoot technical problems and ask probing questions to find the root cause or a problem
**Experience and Skills (Technical)**:
- Queue management
- Data analysis using SIEM, Database tools such as Elastic, and Excel
- Experience troubleshooting security devices and SIEM
- Ability to create and maintain content within SIEM environments and make recommendations to clients to better their visibility
- IDS monitoring/analysis with tools such as Sourcefire and Snort
- Experience with SIEM platforms preferred (QRadar, LogRhythm, Exabeam, and Splunk)
- Familiarity with web-based attacks and the OWASP Top 10 at a minimum
- Attack vectors and exploitation
- Mitigation
- Direct (E.g. SQL Injection) versus indirect (E.g. cross-site scripting) attacks
- Familiarity with SANS top 20 critical security controls
- Understand the foundations of enterprise Windows security including:
- Active Directory
- Windows security architecture and terminology
- Privilege escalation techniques
- Common mitigation controls and system hardening
- Anti-Virus (AV) and Host Based Intrusion Prevention (HIPS)
- Experience in monitoring at least one commercial AV solution such as (but not limited to) Carbon Black, CrowdStrike, Symantec, or Sophos Central
- Ability to identify common false positives and make suggestions on tuning
- Malware
- Understanding of root causes of malware and proactive mitigation
- Propagation of malware in enterprise environments
- Familiarity with web-based exploit kits and the methods employed by web based exploit kits
- Familiarity with concepts associated with Advanced Persistent Threats and “targeted malware”
- Experience with malware protection tools such as FireEye a plus.
- Understanding of malware mitigation controls in an enterprise environment.
- Network Based Attacks / System Based Attacks
- Denial of Service Attacks
- HTTP/HTTPS Based DoS Attacks
- Network Based DoS Attacks
- Brute force attacks
- Covert channels, egress, and data exfiltration techniques
- Familiarity with vulnerability scoring systems such as CVSS
- Basic understanding of vulnerability assessment tools such as vulnerability scanners and exploitation frameworks
**Must Have**:
- Eligibility to obtain security clearance
- Shift flexibility, including the ability to provide on call support when needed
- Demonstrated expe
-
Cybersecurity Threat Hunter
3 days ago
Bengaluru, Karnataka, India Kyndryl Full timeJob Description">This is an exciting opportunity to join our team as a Cybersecurity Threat Hunter where you will play a critical role in protecting our clients' infrastructure from cyber threats.You will be responsible for implementing and managing Proofpoint Email Security solutions to safeguard against phishing, malware, and other email...
-
Cybersecurity Threat Hunter
2 days ago
Bengaluru, Karnataka, India Publicis Re:Sources Full timeAt Publicis Re:Sources, we're looking for a Cybersecurity Threat Hunter to join our team. As a key member of our Blue Team, you'll be responsible for identifying and mitigating potential security threats.We're seeking someone with strong analytical skills and experience in cloud security. You'll work closely with our cross-functional teams to implement...
-
Cybersecurity Threat Hunter
3 days ago
Bengaluru, Karnataka, India KPMG Full timeCompany Overview">KPMG is a leading professional services firm that helps organizations navigate complexity and achieve success in the global marketplace.">Job Description">We are seeking a highly skilled Cybersecurity Threat Hunter to join our team. The successful candidate will have a strong understanding of IT security standards and frameworks, as well as...
-
Senior Threat Hunter
3 weeks ago
Bengaluru, Karnataka, India SentinelOne Full timeAbout Us: SentinelOne is defining the future of cybersecurity through our XDR platform that automatically prevents, detects, and responds to threats in real-time. Singularity XDR ingests data and leverages our patented AI models to deliver autonomous protection. With SentinelOne, organizations gain full transparency into everything happening across the...
-
Cybersecurity Threat Hunter
3 days ago
Bengaluru, Karnataka, India Innspark Solutions Private Limited Full timeJob OverviewInnspark Solutions Private Limited is seeking an experienced Cybersecurity Threat Hunter to join our team. As a key member of our Security Operations Center, you will be responsible for detecting and responding to IT threats in a dynamic environment.Responsibilities* Collaborate with Security Engineers and SOC Managers to provide situational...
-
Cloud Security Threat Hunter
2 days ago
Bengaluru, Karnataka, India Publicis Re:Sources Full timeWe are looking for a highly motivated and skilled Cloud Security Threat Hunter to join our team at Publicis Re:Sources.About the RoleIn this exciting position, you will be responsible for identifying and mitigating potential security threats in our cloud infrastructure. As a key member of our Security Operations Center (SOC), you will work closely with our...
-
Advanced Threat Hunter
3 days ago
Bengaluru, Karnataka, India Ssquad Full timeSsquad is seeking a highly skilled Senior Penetration Testing Specialist to join our team. As an Advanced Threat Hunter, you will be responsible for identifying vulnerabilities and providing detailed risk assessments with actionable recommendations.Key Responsibilities:Conduct advanced penetration tests on networks, web applications, APIs, cloud...
-
Threat Hunter
22 hours ago
Bengaluru, Karnataka, India YASH Technologies Full timeJob Description:Key ResponsibilitiesResponsible for monitoring the security patterns to identify, isolate, and detect the threats before attackers tend to exploit them.Design and run custom analysis models on security event information to discover active threats.Identify (hunting) security nuances and abnormalities in the environment.Develop use cases and...
-
Principal Threat Hunter On-site, Bangalore
1 week ago
Bengaluru, Karnataka, India Optiv Full time**Principal Threat Hunter**: At Optiv, we’re on a mission to help our clients make their businesses more secure. We’re one of the fastest-growing companies in a truly essential industry. In your role at Optiv, you’ll be inspired by a team of the brightest business and technical minds in cybersecurity. We are passionate champions for our clients and...
-
Threat Hunter
3 weeks ago
Bengaluru, Karnataka, India myGwork Full timeThis job is with Kyndryl, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Who We Are At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are...
-
Threat Hunter
3 weeks ago
Bengaluru, Karnataka, India 5100 Kyndryl Solutions Private Limited Full timeWho We Are At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities. The...
-
Threat Hunter
2 weeks ago
Bengaluru, Karnataka, India myGwork Full timeThis job is with Kyndryl, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Who We AreAt Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world...
-
Cybersecurity Threat Hunter
3 days ago
Bengaluru, Karnataka, India Palo Alto Networks Full timeCybersecurity Threat HuntingPalo Alto Networks is a leading provider of enterprise cybersecurity solutions. We are seeking a skilled MDR Analyst to join our Unit 42 team, responsible for detecting and responding to cyber incidents facing customers' internal business.The ideal candidate will have 3+ years of experience in a multi-tiered SOC/IR environment and...
-
Cybersecurity Threat Hunter
3 days ago
Bengaluru, Karnataka, India Kyndryl Full timeCompany OverviewKyndryl is a leading provider of digital infrastructure solutions, empowering organizations to drive innovation and growth. Our commitment to cybersecurity is unwavering, as we strive to protect our clients' most critical assets.The RoleWe are seeking an experienced Cybersecurity Defense professional to join our team. As a key member of our...
-
Cybersecurity Threat Hunter
17 hours ago
Bengaluru, Karnataka, India Palo Alto Networks Full timeCybersecurity Threat Hunting and Incident ResponsePalo Alto Networks is a leading provider of cybersecurity solutions, dedicated to protecting our digital way of life. Our mission is to be the cybersecurity partner of choice, and we're looking for talented individuals to join our Unit 42 MDR team.About UsOur company values are built on the foundation of...
-
Cyber Threat Hunter
3 days ago
Bengaluru, Karnataka, India eSentire Full timeAbout eSentireeSentire is a leading provider of Managed Detection and Response (MDR) services, dedicated to protecting critical data and applications for over 2000 organizations across 80 countries. Our mission is to hunt, investigate, and stop cyber threats before they become business-disrupting events.We were founded on the premise that if you can't find a...
-
Threat Intelligence Analyst
3 days ago
Bengaluru, Karnataka, India Bharat Head Hunters Full timeJob OverviewWe are Bharat Head Hunters, a renowned leader in cybersecurity services. We offer a dynamic environment where you can grow your career as a Threat Intelligence Analyst. As part of our team, you will be responsible for analyzing complex cybersecurity threats and developing strategies to mitigate them. Our ideal candidate is a highly skilled...
-
Cybersecurity Threat Hunter
3 days ago
Bengaluru, Karnataka, India Palo Alto Networks Full timePalo Alto Networks is a leader in the cybersecurity industry, and we're looking for a skilled MDR Analyst to join our team. As a MDR Analyst, you'll be responsible for detecting and responding to cyber incidents facing customers' internal businesses.Key Responsibilities:Detect and respond to cyber incidents using established processes for analyzing threat...
-
Microsoft Defender
1 week ago
Bengaluru, Karnataka, India Kyndryl Full time**Who We Are** At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities. **The...
-
principal threat intel manager
3 weeks ago
Bengaluru, Karnataka, India Microsoft Full timeOverview Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, and developer with a security cloud that protects them with end to...