Security Engineer - Threat Hunting / Threat Intelligence

KPMG Assurance and Consulting Services LLP; Dadri, Gurugram District, Bengaluru; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

KPMG Assurance and Consulting Services LLP is hiring for a Threat Intelligence role focused on OSINT and all-source cyber-security intelligence to support clients. You will craft customized intelligence reports, present findings to stakeholders, and develop advisories and threat landscape analyses.

The role requires hands-on OSINT tool usage, deep web scanning, and experience with MISP and Recorded Future. You will work across teams including incident response and security monitoring to drive

Qualifications

• Hands on experience with OSINT tools and threat intelligence topics.
• Ability to perform dark and deep web scans.
• Experience deploying/managing threat intel tools such as MISP and Recorded Future.
• Basic understanding of vulnerability scanning solutions.
• Solid grasp of cyber security threats and attack vectors.

Responsibilities

• Use intelligence tools to create customized threat intelligence reports.
• Publish and explain reports to stakeholders.
• Collect, process, and document information using an all-source approach on cyber-security topics.
• Develop tactical and strategic intelligence products including advisories and threat landscape reports.
• Maintain understanding of threat actor groups, campaigns, and TTPs.
• Act as escalation point for CTI analysis and investigations.
• Collaborate with incident response and security monitoring teams for joint investigations.
• Identify intelligence gaps and engage leadership on strategies to meet requirements.
• Produce daily, weekly, quarterly, and yearly reports for clients, partners, and internal teams.

Skills

OSINT Tools

Dark Web Scans

Vuln Scanning Basics

Threat Vectors

Threat Intel Deploy

Frameworks

Tools

MISP

Recorded Future

Job description

Roles & Responsibilities:

• Use various intelligence collection and reporting tools and frameworks to create customized threat Intelligence reports
• Publish, present, and explain the reports to relevant stakeholders
• Collect, process, catalog, and document information using an all-source approach and various technical and human means on cyber-security topics as required based on defined intelligence requirements.
• Development of various tactical and strategic intelligence products including advisories and threat landscape reports
• Maintain a deep understanding of threat actor groups, campaigns and tactics, techniques, and procedures
• Act as an escalation point for CTI analysis and investigation-related events
• Work with members of various teams, such as incident response and security monitoring, to carry out joint investigations or other threat management functions
• Identifies gaps in available intelligence information and engages with leadership on strategies to meet intelligence requirements through Intelligence collection processes.
• Aid in and participate in daily, weekly, quarterly, and yearly production reporting for clients, partners, and internal teams.

Required Skillset:

• Should have hands on experience in various OSINT tools
• Should be able to perform with dark and deep web scans
• Should have experience in deployment/management of various tools pertaining o Threat Intelligence including MISP, Recorded Future etc.
• Should have basic understanding vulnerability scanning solutions
• Must possess intermediate level of Cyber Security threats and various attack vectors