Threat Hunter Ii
2 months ago
Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, and developer with a security cloud that protects them with end to end, simplified solutions. The Microsoft Security organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world.
We are the Microsoft 365 Defender Experts team, and we are committed to defending Microsoft customers from sophisticated cyber-attacks and adversaries. Our mission is to help protect customers with a truly innovative proactive approach, advising on emerging trends, and engaging in valuable partnerships. As the Research organization within Defender Experts, it’s our job to stay one step ahead of malicious adversaries and predict the threats of the future. We work with partners across Microsoft to innovate new approaches for detecting and tracking threats, attacker techniques, their tools and infrastructure. We are always learning. Insatiably curious. We lean into uncertainty, take risks, and learn quickly from our mistakes. We build on each other’s ideas, because we are better together. Our security products are brought together in the Microsoft 365 Defender (M365D) suite. M365D enables Microsoft’s enterprise customers to detect, investigate, understand, and respond to advanced threats on their networks via a combination of behavioral sensors, security analytics, and threat intelligence. We are looking for a Threat Analyst to join our defender Experts team. In this role you will use deep knowledge of the attacker landscape and rich telemetry from our sensors across wide range of Microsoft security products to respond to the potential adversaries or suspicious activities in the customer environment.
- Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond._
**Responsibilities**:
- Digital forensics investigations to analyze and understand the root cause of security incidents, utilizing M365 Defender logs and data. Document findings and prepare comprehensive incident reports.
- Monitor security alerts and events, ensuring timely identification and escalation of potential threats with a focus on M365 Defender's monitoring capabilities. Utilize M365D product suite (MDE/MDO/MDI etc) and other SIEM tools to enhance the customer's security posture.
- Strong understanding of cloud architecture, services, and deployment models, as well as common security threats and attack vectors targeting cloud environments.
- Proactively search for indicators of compromise (IoCs) and emerging threats within the customer environment. Develop and execute threat hunting strategies.
- Work closely with other SOC team members and IT personnel to share threat intelligence and enhance overall security awareness.
- Analytical skills with the ability to interpret complex datasets and generate actionable insights.
- This role involves working in a 24x7 shift pattern.
**Qualifications**:
Bachelor's degree in a relevant field or equivalent work experience.
- 5+ years of experience in a SOC environment, with a focus on incident response, threat hunting, and host forensics, specifically leveraging M365 Defender product suite.
- Proficiency in using SIEM tools and other security technologies. Ability to track, analyze, and brief on new and ongoing cyber-attacks.
- Knowledge of operating system internals, OS security mitigations & understanding of Security challenges in Windows, Linux, Mac, Android & iOS platforms - Profound knowledge of kill-chain model, ATT&CK framework.
- Knowledge of major cloud and productivity platforms as well as identity systems and related security concern.
- Excellent cross-group and interpersonal skills, with the ability to articulate business need for detection improvements.
- Additional advanced technical degrees or cyber security certifications such as CISSP, OSCP, CEH, or GIAC certifications
Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized s
-
Threat Hunter
17 hours ago
Bengaluru, Karnataka, India Cyble Inc. Full timeAbout the Role:The Cyber Threat Hunter will have an opportunity to lead threat hunting missions to support our global research and client threat intelligence teams.He/She will track emerging threats and threat actors and Advanced Persistent Threat groups, evaluate, and prioritize threat artifacts (malware samples, IOCs, IOAs) and conduct a deeper analysis....
-
Threat Hunter
15 hours ago
Bengaluru, Karnataka, India Cyble Inc. Full timeAbout the Role:The Cyber Threat Hunter will have an opportunity to lead threat hunting missions to support our global research and client threat intelligence teams.He/She will track emerging threats and threat actors and Advanced Persistent Threat groups, evaluate, and prioritize threat artifacts (malware samples, IOCs, IOAs) and conduct a deeper analysis....
-
Threat Hunter
2 weeks ago
Bengaluru, India Cyble Inc. Full timeAbout the Role: The Cyber Threat Hunter will have an opportunity to lead threat hunting missions to support our global research and client threat intelligence teams.He/She will track emerging threats and threat actors and Advanced Persistent Threat groups, evaluate, and prioritize threat artifacts (malware samples, IOCs, IOAs) and conduct a deeper analysis....
-
Threat Hunter
2 weeks ago
Bengaluru, India Cyble Inc. Full timeAbout the Role: The Cyber Threat Hunter will have an opportunity to lead threat hunting missions to support our global research and client threat intelligence teams. He/She will track emerging threats and threat actors and Advanced Persistent Threat groups, evaluate, and prioritize threat artifacts (malware samples, IOCs, IOAs) and conduct a deeper...
-
Threat Hunter
2 weeks ago
Bengaluru, India Cyble Inc. Full timeAbout the Role: The Cyber Threat Hunter will have an opportunity to lead threat hunting missions to support our global research and client threat intelligence teams.He/She will track emerging threats and threat actors and Advanced Persistent Threat groups, evaluate, and prioritize threat artifacts (malware samples, IOCs, IOAs) and conduct a deeper analysis....
-
Threat Hunter
1 month ago
Bengaluru, India Cyble Inc. Full timeAbout the Role: The Cyber Threat Hunter will have an opportunity to lead threat hunting missions to support our global research and client threat intelligence teams.He/She will track emerging threats and threat actors and Advanced Persistent Threat groups, evaluate, and prioritize threat artifacts (malware samples, IOCs, IOAs) and conduct a deeper analysis....
-
Threat Hunter
1 month ago
Bengaluru, India Cyble Inc. Full timeAbout the Role: The Cyber Threat Hunter will have an opportunity to lead threat hunting missions to support our global research and client threat intelligence teams.He/She will track emerging threats and threat actors and Advanced Persistent Threat groups, evaluate, and prioritize threat artifacts (malware samples, IOCs, IOAs) and conduct a deeper analysis....
-
Senior Threat Hunter
12 hours ago
Bengaluru, India CyberProof Full timeLocation: Noida/Pune/Hyderabad/Chennai/Bangalore/Trivandrum/KochiCyberProof is a cyber security services and platform company whose mission is to help our customers react faster and smarter – and stay ahead of security threats, by creating secure digital ecosystems. CyberProof automates processes to detect and prioritize threats early and respond rapidly...
-
Senior Threat Hunter
1 day ago
Bengaluru, Karnataka, India CyberProof Full timeLocation: Noida/Pune/Hyderabad/Chennai/Bangalore/Trivandrum/KochiCyber Proof is a cyber security services and platform company whose mission is to help our customers react faster and smarter – and stay ahead of security threats, by creating secure digital ecosystems.Cyber Proof automates processes to detect and prioritize threats early and respond rapidly...
-
Senior Threat Hunter
3 days ago
Bengaluru, India CyberProof Full timeLocation: Noida/Pune/Hyderabad/Chennai/Bangalore/Trivandrum/KochiCyberProof is a cyber security services and platform company whose mission is to help our customers react faster and smarter – and stay ahead of security threats, by creating secure digital ecosystems. CyberProof automates processes to detect and prioritize threats early and respond rapidly...
-
Senior Threat Hunter
2 months ago
Bengaluru, India SentinelOne Full timeAbout Us: SentinelOne is defining the future of cybersecurity through our XDR platform that automatically prevents, detects, and responds to threats in real-time. Singularity XDR ingests data and leverages our patented AI models to deliver autonomous protection. With SentinelOne, organizations gain full transparency into everything happening across the...
-
(17/05/2024) Threat Hunter
1 month ago
Bengaluru, India Cyble Inc. Full timeAbout the Role:The Cyber Threat Hunter will have an opportunity to lead threat hunting missions to support our global research and client threat intelligence teams.He/She will track emerging threats and threat actors and Advanced Persistent Threat groups, evaluate, and prioritize threat artifacts (malware samples, IOCs, IOAs) and conduct a deeper analysis....
-
Cyble - Threat Hunter - Cyber Security
2 months ago
Bengaluru, India CYBLE INC Full timeAbout the Role : The Cyber Threat Hunter will have an opportunity to lead threat hunting missions to support our global research and client threat intelligence teams.He/She will track emerging threats and threat actors and Advanced Persistent Threat groups, evaluate, and prioritize threat artifacts (malware samples, IOCs, IOAs) and conduct a deeper analysis....
-
Principal Threat Hunter On-site, Bangalore
1 week ago
Bengaluru, Karnataka, India Optiv Full time**Principal Threat Hunter**: At Optiv, we’re on a mission to help our clients make their businesses more secure. We’re one of the fastest-growing companies in a truly essential industry. In your role at Optiv, you’ll be inspired by a team of the brightest business and technical minds in cybersecurity. We are passionate champions for our clients and...
-
Hunter
3 weeks ago
Bengaluru, India Cyble Inc. Full timeAbout the Role: The Cyber Threat Hunter will have an opportunity to lead threat hunting missions to support our global research and client threat intelligence teams. He/She will track emerging threats and threat actors and Advanced Persistent Threat groups, evaluate, and prioritize threat artifacts (malware samples, IOCs, IOAs) and conduct a deeper...
-
ColorTokens - Threat Hunter - Cyber Security
2 months ago
Bengaluru, India Colortokens Full timeThe Threat Hunter will be responsible for identifying advanced persistent threats using automated models, develop new models based on latest attack patterns, analysis of anomalous log data, provide expert analytic investigative support for complex security incidents.The focus of the Threat Hunter is to detect advanced attacks, perform investigation on...
-
Threat Hunter 6 to 9 Years Pan India
2 months ago
Bengaluru, Karnataka, India Capgemini Full time**Job Description**: - **Experience in developing threat detection content support of incident response.**: - **Experience with Splunk or Splunk Enterprise Security.**: - **Experience with common security frameworks (e.g. MITRE ATT&CK, Cyber Kill Chain).**: - **Experience with programming or scripting languages such as Python or Powershell.**: -...
-
Principal Threat Hunter On-site, Bangalore
4 weeks ago
Bengaluru, Karnataka, India Optiv Full timeIf you are seeking a culture that supports growth, fosters success, and moves the industry forward, find your place at Optiv! As a market-leading provider of cyber security solutions, Optiv has the most comprehensive ecosystem of security products and partners to deliver unparalleled services. Our rich and successful history with our clients is based on...
-
Principal Threat Hunter On-site, Bangalore
22 hours ago
Bengaluru, Karnataka, India Optiv Full timePrincipal Threat Hunter:At Optiv, we're on a mission to help our clients make their businesses more secure. We're one of the fastest-growing companies in a truly essential industry.In your role at Optiv, you'll be inspired by a team of the brightest business and technical minds in cybersecurity. We are passionate champions for our clients and know from...
-
Software Engineer II
2 months ago
Bengaluru, India Mimecast Full timeSoftware Engineer II – Threat Reporting & Response Team (TRR)The driving force behind Threat Analytics and Intelligence at MimecastMimecast is looking for a Software Engineer II experienced in cloud application development to join our new team in Bangalore. The purpose of the team is to design, implement and operate the next generation of Mimecast products...
