Terralogic
Website:
terralogic.com
Job details:
Experience: 6–8 Years
Location: Bangalore / Hyderabad / Mumbai
About the Role
We are looking for an experienced Threat Hunting Specialist to proactively identify, investigate, and mitigate advanced cyber threats across enterprise environments. The ideal candidate will have hands-on expertise in threat hunting, incident response, SIEM, EDR/XDR platforms, and threat intelligence, with a strong understanding of modern attacker techniques and security operations.
Key Responsibilities
- Conduct proactive, hypothesis-driven threat hunting across endpoint, network, cloud, identity, and security telemetry.
- Investigate suspicious activities, indicators of compromise (IOCs), and attacker tactics, techniques, and procedures (TTPs).
- Leverage the MITRE ATT&CK framework to develop hunting hypotheses and improve detection coverage.
- Analyze endpoint, network, and cloud telemetry to identify advanced threats and anomalous behavior.
- Develop and optimize detection rules, hunting queries, correlation logic, and analytical workflows.
- Collaborate with SOC, Incident Response, and Security Engineering teams during investigations and response activities.
- Utilize threat intelligence to identify emerging threats, malware campaigns, and industry-specific risks.
- Prepare technical reports, executive summaries, and actionable security recommendations.
Required Skills
- 6–8 years of experience in Threat Hunting, Cybersecurity Operations, SOC, or Incident Response.
- Hands-on experience with SIEM platforms such as Microsoft Sentinel, Splunk, IBM QRadar, Elastic, or CrowdStrike.
- Experience with EDR/XDR solutions including CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, or Carbon Black.
- Strong understanding of Windows, Linux, Active Directory, Azure, AWS, and GCP environments.
- Knowledge of malware analysis, lateral movement, privilege escalation, persistence, defense evasion, and command-and-control techniques.
- Experience developing detection logic, behavioral analytics, and threat hunting use cases.
- Strong scripting or query experience using KQL, SPL, SQL, Python, PowerShell, or Bash.
- Excellent analytical, documentation, communication, and stakeholder management skills.
Preferred Skills
- Experience monitoring security across Azure, AWS, or Google Cloud Platform.
- Knowledge of identity-based attacks, SaaS security monitoring, and cloud misconfigurations.
- Familiarity with Sigma, YARA, SOAR platforms, and threat intelligence platforms such as MISP, VirusTotal, Recorded Future, or OpenCTI.
- Understanding of MITRE ATT&CK, MITRE D3FEND, Cyber Kill Chain, and NIST Incident Response Framework.
Preferred Certifications
- GCIH
- GCIA
- GCFA
- GCTI
- CISSP
- CompTIA CySA+
- Microsoft SC-200
- Microsoft AZ-500
- Splunk Core Certified Power User
- Equivalent cybersecurity certifications
If you're passionate about proactively uncovering sophisticated cyber threats and strengthening enterprise security, we'd love to hear from you.
Click on Apply to know more.
