Threat Hunter

Blupace Hyderabad; Bengaluru; On-site; INR 1,800,000 - 2,600,000; Full time

Job summary

Blupace Hyderabad is seeking an experienced Threat Hunter to proactively identify, investigate, and mitigate advanced cyber threats across endpoints, networks, identities, and cloud environments.

You will develop hypothesis-driven hunting strategies, leverage SIEM/EDR/XDR tools, and translate findings into new detections while collaborating with SOC, Incident Response, and Threat Intelligence teams to reduce dwell time.

Qualifications

• 6+ years in SOC/Threat Detection with 2+ years in threat hunting.
• Strong analytical and investigative mindset.
• Willingness to work in 24/7 SOC environments.

Responsibilities

• Conduct hypothesis-based and IOC-driven threat hunting across endpoints, networks, identities, and cloud.
• Develop MITRE ATT&CK-aligned hunting hypotheses.
• Convert hunting findings into security incidents and detection rules.
• Collaborate with SOC, IR, and Threat Intelligence teams.
• Produce hunting reports and KPIs.

Skills

Threat hunting

SOC operations

Analytical mindset

Client-facing reporting

Tools

Splunk

Microsoft Sentinel

Chronicle

Palo Alto XSIAM

EDR/XDR

KQL

SPL

PowerShell

Python

Job description

Job Description Threat Hunter

Role Overview

Responsible for proactively identifying, investigating, and mitigating advanced cyber threats that evade traditional, alertdriven security controls. The role focuses on hypothesis-driven and intelligence-led threat hunting across endpoint, network, identity, and cloud environments to reduce dwell time and enhance detection maturity.

Key Responsibilities

• Conduct hypothesis-based and IOC-driven threat hunting across:
• Endpoint (EDR/XDR)
• SIEM / Log Management platforms
• Network telemetry (NDR)
• Identity logs (AD / Entra ID)
• Cloud platforms (Azure, AWS, M365)
• Identify stealthy and advanced threats, including:
• LivingofftheLand (LotL) techniques
• Advanced Persistent Threats (APTs)
• Lateral movement and privilege escalation
• Insider threat indicators
• Develop and execute MITRE ATT&CK–aligned hunting hypotheses
• Convert hunting findings into:
• Security incidents
• New detection rules (SIEM / EDR / XDR)
• Change or service requests (misconfigurations, logging gaps)
• Collaborate with SOC, Incident Response, and Threat Intelligence teams
• Produce hunting reports and KPIs (dwell time reduction, hunts to detections, incidents generated)

Technical Skills

• Strong expertise in SIEM/SOAR platforms (Splunk, Microsoft Sentinel, Chronicle, Palo Alto XSIAM)
• Hands-on experience with EDR/XDR tools (Microsoft XDR, CrowdStrike, Sentinel One, Palo Alto Cortex)
• Proficiency in KQL / SPL / advanced hunting queries
• Deep understanding of MITRE ATT&CK techniques and TTPs
• Strong OS knowledge: Windows, Linux, macOS
• Basic scripting skills (PowerShell / Python preferred)
• Cloud security exposure (Azure, AWS, M365 Defender)

Experience & Soft Skills

• 6+ years in SOC / Threat Detection, with 2+ years in threat hunting
• Strong analytical and investigative mindset
• Clientfacing reporting and presentation skills
• Willingness to work in 247 SOC environments