Conducts proactive threat hunting; builds, evolves, and expands hunting tooling, techniques and use-cases; integrates relevant threat intelligence and dark web data into hunting operations; advised SOC team on platform enhancements to further enable rapid and effective threat hunting; works closly with SOC clients to remediate threats and improve long-term security posture; ability to work with large datasets to get valuable and vital information; strong understanding of common malware activity on endpoints; knowledge of MITRE ATT&CK framework and known APT group activity; utilizes Endpoint Detection & Response (EDR) technologies; works with Cyber threat Intelligence tools and data; leverages OSINT tools and techniques
Education: Bachelor’s Degree in Computer Information or Information Technology, Cybersecurity or Information Assurance or equivalent work experience of 5 or more years.
Certifications: GIAC Advanced Incident Response, Threat Hunting, and Digital Forensics (GCFA), GIAC Cyber Threat Intelligence (GCTI)