Senior Associate - Threat Hunting

NPCI International; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Comprehensive medical, accidental, and life insurance

On-site medical center and mental wellness support

Inclusive parental leave

Relocation and travel support

Mobile reimbursement and car lease options

Provident Fund and Gratuity contributions

Job summary

NPCI International in Hyderabad is seeking a Threat Hunting Specialist to enhance its Information Security division. This permanent, full-time position requires 3 to 6 years of experience in cybersecurity, with a strong emphasis on threat hunting methodologies and tool proficiency.

The ideal candidate will conduct investigations across multiple platforms, collaborate with security teams, and develop automation scripts to improve detection capabilities. Comprehensive employee perks and a commitment to an inclusive workplace culture are offered.

Qualifications

• 3 to 6 years of experience in threat hunting or cybersecurity.
• Strong understanding of threat hunting methodologies and tools.

Responsibilities

• Conduct hypothesis-driven threat hunting using threat intelligence.
• Analyze financial sector-specific threat landscapes.
• Perform deep investigations across endpoints and network logs.
• Utilize MITRE ATT&CK for structured hunting activities.
• Develop advanced queries for suspicious pattern detection.
• Collaborate with SOC and threat intelligence teams.
• Automate workflows and enhance detection capabilities.

Skills

Windows/Linux internals

Network protocols and traffic analysis

SIEM tools

EDR/XDR platforms

Query languages (KQL, SPL, SQL)

Scripting skills (Python, PowerShell)

MITRE ATT&CK framework

Analytical and problem-solving skills

Education

BE / BTech in Computer Science, IT, or related field

Tools

Splunk

LogRhythm

ELK

CrowdStrike

SentinelOne

Job description

National Payments Corporation of India (NPCI) | Full Time

The National Payments Corporation of India (NPCI) is a pivotal institution in India's digital payments ecosystem, established by the Reserve Bank of India (RBI) and the Indian Banks’ Association (IBA). It operates under the Payment and Settlement Systems Act, 2007, and is incorporated as a “Not for Profit” company under Section 25 of the Companies Act 1956 (now Section 8 of the Companies Act 2013). NPCI is dedicated to building world‑class digital payment infrastructure through innovative and efficient retail payment platforms. NPCI is an Equal Opportunity Employer committed to fostering an inclusive workplace culture with zero tolerance for discrimination based on race, ethnicity, disability, gender identity, or sexual orientation, including support for the LGBTQ+ community.

About NPCI

NPCI shapes the future of digital payments in India and beyond, offering cutting‑edge projects that directly impact millions.

Employee Perks and Benefits

• Insurance & Wellness: Comprehensive coverage – medical, accidental, and life insurance.
• Employee Assistance Program: On‑site medical center, financial/legal counselling, mental wellness.
• Annual Wellness Bouquet: Holistic wellbeing support.
• Parental Leave: Inclusive maternity and paternity leave.
• Daycare Support: Assistance for working parents.
• Mobility Benefits: Relocation, transfers, and travel support.
• Home Loan Interest Support: Up to 50% reimbursement.
• Mobile Reimbursement: New handset every 2 years.
• Car Lease, Salary Advance, Subsidized Meals.
• Reward & Recognition Program.
• Technology Innovation: Patents and IP rights policy.
• Provident Fund (PF) and Gratuity contributions.

Role Overview

Job Title: Threat Hunting Specialist
Division: Information Security
Years of Experience: 3 to 6 years
Education: BE / BTech in Computer Science, IT, or related field
Employment Type: Full‑time
Role Type: Permanent

Key Responsibilities

• Conduct hypothesis‑driven threat hunting and execute structured hunt missions using threat intelligence and behavioral analytics.
• Analyze financial sector‑specific threat landscapes and identify attacker TTPs.
• Perform deep investigations across endpoints, network, and logs to identify hidden or advanced threats.
• Utilize MITRE ATT&CK framework to map, validate, and structure hunting activities.
• Develop and execute advanced queries for detecting suspicious patterns across SIEM/EDR platforms.
• Collaborate with SOC, IR, and threat intelligence teams for improving detection use‑cases.
• Automate hunting workflows and data analysis using scripting.
• Continuously enhance detection capabilities and improve existing hunting playbooks.

Requirements

• Strong understanding of Windows/Linux internals (process ancestry, registry, memory analysis).
• Deep knowledge of network protocols and traffic analysis.
• Hands‑on experience with SIEM tools: Splunk, LogRhythm, ELK.
• Hands‑on experience with EDR/XDR platforms: CrowdStrike, SentinelOne.
• Proficiency in query languages such as KQL, SPL, or SQL for threat hunting.
• Strong scripting skills in Python and/or PowerShell for automation and analytics.
• In‑depth understanding of MITRE ATT&CK framework and adversary TTP analysis.
• Strong analytical, investigative, and problem‑solving skills.