- Proactively 'hunt' for potential malicious activity and incidents across the environment using advanced threat network and host-based tools adopting Mitre Attack Framework.
- Perform hunting for malicious activity across the network, endpoint, and Critical Assets.
- Create hunting hypothesis and perform IOCs & TTPs based threat hunting and share reports with the management weekly on the findings, misconfiguration, use case development and provide suggestions for counter measurement.
- Expertise in hunting, managing, and writing detections using logs from Endpoint Detect and Response solutions like Carbon Black EDR, CrowdStrike EDR & Cortex XDR etc.
- Research on different TTP's for ATP Threat groups which are used by attackers during the sophisticated Cyber-attacks.
- Collaborates with technical and threat intelligence team to provide indications and warnings and contributes to predictive analysis of malicious activity.
- Perform cyber security threat hunting & detection activities with specific focus on countermeasure Tactics, Techniques and Procedures (TTPs)
- Contribute to the tuning and development of security information and event monitoring systems (SIEM) use cases and other security control configurations to enhance threat detection capabilities.
- Familiarity with threat modelling, development of attack plans, performing manual & automated Ethical Hacking, & develop proof of concept exploits.
- Evaluates new security technologies and products and performs engineer-level work and analysis to determine if solutions should be pursued.
x
