Threat Hunter

TCS; Dadri; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

TCS is seeking an experienced Senior Cyber Threat Intelligence Analyst in India. You will review all-source intelligence, identify emerging threat trends, and transform findings into timely, actionable intelligence products to strengthen our defensive posture.

You will conduct technical threat investigations, provide attribution and context to threats, and produce high-quality reports and briefings for diverse audiences including executive management.

Qualifications

• 5+ years of experience in cyber threat intelligence cycle including collection, production and writing.
• Experience with threat analysis models such as Diamond Model, Cyber Kill Chain, and MITRE ATT&CK.
• Certifications preferred - CISSP, GCTI, eCTHP or equivalent.

Responsibilities

• Review all-source intelligence (internal, open source, and closed source) to identify emerging threat trends, TTPs and IOCs.
• Transform trends into actionable intelligence products to support defensive posture through prevention, detection, and Red Team activities.
• Conduct intelligence investigations into malicious cyber activity and provide attribution and context to threats to the network.
• Produce high-quality written reports, presentations, and briefings for technical teams and executive management.
• Support time-sensitive cyber incident response by providing intelligence including TTPs and IOCs to shorten response cycles.
• Maintain relationships with Security Operations Centre, Supply Chain Security, and Vulnerability teams.
• Share insights with industry and government organizations to contribute to the wider cyber threat intelligence community.
• Stay updated on cyber threat trends, tooling, and processes to apply best practices globally.
• Executive briefing & reporting with attention to detail.
• Flexibility to address issues beyond normal hours when needed.

Job description

Interview Date : 8th August 2026 (Saturday)

Interview Mode : Face to Face (Walkin)

Job Description :

• . Review all-source intelligence including internal, open source and closed source intelligence to identify emerging threat trends, TTP’s and IOCs.
• Transform these trends and TTP’s into timely, actionable intelligence products to contribute to defensive posture through prevention, detection and Red Team activities.
• Conduct intelligence investigations into malicious cyber activity to provide attribution, identify adversary TTP’s, and provide additional context to threats to the network.
• Produce high-quality written reports, presentations and briefings, both in internal and external forums, to a wide variety of audiences, ranging from highly technical teams to executive management.
• Support time-sensitive and critical cyber incident response activities by providing intelligence including TTP’s and IOCs to shorten the incident response cycle and protect the Customer network.
• Establish and maintain productive internal working relationships with other critical teams including our Security Operations Centre, Supply Chain Security, and Vulnerability Team.
• Contribute to the wider cyber threat intelligence community by establishing critical sharing and interpersonal relationships with industry and government organizations.
• Stay up to date on relevant cyber threat trends, defensive cyber practices, tooling and processes to apply industry standard practices to Global operations.
• Executive briefing & reporting skills with attention to detail
• Flexibility to attend to issues beyond normal business hours when needed

Responsibilities:

• A good understanding of and at least 5+ years of experience with the cyber threat intelligence cycle, and experience in cyber threat intelligence collection, production, and writing.
• 5+ years of experience with threat analysis models such as the Diamond Model, Cyber Kill Chain, and MITRE ATT&CK TTP framework.
• Certifications preferred - CISSP, GCTI, eCTHP or other equivalent Certifications
• Experience conducting technical threat intelligence investigations into malicious activity, including conducting attribution and TTP analysis.
• Familiarity with technical engineering requirements is associated with the production of intelligence.
• Experience with and understanding of incident response processes.