Position Overview
- Conduct hypothesis – driven hunts to identify advanced threats & APTs (Advanced Persistent Threats).
- Analyze network traffic, logs & endpoint data using SIEM & EDR tools.
- Identify patterns, anomalies & suspicious activities using behavioural analytics & threat intelligence.
- Develop detection rules improve monitoring capabilities.
- Work closely with SOC analysts, incident responders & threat intelligence teams.
- Documents findings, create detailed reports & recommend mitigation strategies.
- Stay updated on emerging threats, attack, techniques & security trends.
- Contribute to threat intelligence feeds & detection engineering.