IBM Threat Hunter - L3 

India, Maharashtra, Mumbai 

169692413

• Sr. Cyber Threat Analyst will be Defining, and Leading Threat Hunting COE hunt missions guided by threat intelligence, analysis of anomalous log data, and/or brainstorming sessions with Threat Hunting COE teams.
• Provide guidance on building and/or maturing Threat Hunting COE programs, detecting and responding to computer security incidents, and implementation of tools and technologies used for enterprise security.
• Training teams in order to develope and automate detection of threat actor activities. The Sr. Cyber Threat Analyst will support the customer’s overall cyber threat analysis efforts.
• Ensures that relevant threat indicators are infused in all aspects of program operations. The focus of the Cyber Security Threat Hunter is to proactively investigate security events to identify artefacts of a cyber-attack.
• They will also be expected to participate in several different areas within Security Operations and Incident Response process; these activities can include digital forensics, use case development, security control testing, and hunt plan development.
• Examine alerts from various security monitoring tools, perform triage & determine scope of threats.
• Analyze logs, alerts, suspicious malwares samples from SOC platform deployed at the enterprise.
• Using knowledge of the current threat landscape as well as latest threat-intel, threat actor techniques, and the internal network, analyze log data to detect active threats within the network. Build, document and maintain a comprehensive model of relevant threats to the enterprise.

Required Technical and Professional Expertise

• Minimum 8 years of experience in intelligence or technical analysis with a focus on cyber threat analysis and threat modelling to include preparing and presenting results.
• B.E./ B.Tech/ MCA/ M.Sc. in Computer Science or IT
• Hunt for security threats, identify threat actor groups and their techniques, tools and Processes.
• Monthly tactical briefings on threat observations and findings to the customer stakeholders on threats to the enterprise.
• Keep up to date with information security news, vulnerabilities, tools, techniques, exploits and trends.
• Proactively identify potential threat vectors and work to improve prevention and detection methods.
• Responsible for Threat-Intel platform & ensuring its optimal usage for enterprise security monitoring, use-case & playbook tuning.

Preferred Technical and Professional Expertise

• CEH + CHFI/ GSEC Candidate preferred