Threat Hunter - SOC

Network Intelligence; Mumbai; On-site; INR 1,000,000 - 1,500,000; Full time

Job summary

A cybersecurity firm is looking for a Threat Hunter to proactively identify and mitigate cyber threats before they can cause damage. The ideal candidate will have a strong understanding of networking, operating systems, and security concepts, with hands-on experience using tools like Splunk and CrowdStrike. Responsibilities include analyzing logs, collaborating with SOC teams, and developing detection rules. Preferred qualifications include 2–6 years in SOC and relevant certifications. This role is based in Mumbai, India.

Qualifications

• Proficiency in networking and security concepts.
• Hands-on experience with various security tools is essential.
• Relevant certifications will be highly regarded.

Responsibilities

• Hunt for threats across multiple environments.
• Analyze logs and alerts from security tools.
• Collaborate with SOC and Incident Response teams.

Skills

Networking comprehension

Operating systems (Windows/Linux)

Hands-on experience with SIEM tools

Experience with EDR/XDR solutions

Knowledge of MITRE ATT&CK framework

Log analysis

Incident response basics

Education

Certifications such as GCED, GCIA, GCIH, CEH

2–6 years of experience in SOC or Threat Hunting

Tools

Splunk

QRadar

CrowdStrike

Defender

Job description

A Threat Hunter in the SOC proactively searches for advanced threats, suspicious activities, and hidden attack patterns that may bypass traditional security controls. The role focuses on identifying, analyzing, and mitigating potential cyber threats before they cause damage.

Key Responsibilities

• Proactively hunt for threats across networks, endpoints, servers, and cloud environments
• Analyze logs, alerts, and telemetry from SIEM, EDR, NDR, and other security tools
• Identify Indicators of Compromise (IOCs) and Indicators of Attack (IOAs)
• Conduct hypothesis-driven threat hunting and behavioral analysis
• Investigate advanced persistent threats (APTs), insider threats, and zero-day attacks
• Collaborate with SOC Analysts, Incident Response, and Blue Team for remediation
• Develop and improve detection rules, use cases, and playbooks
• Document findings and provide threat intelligence reports
• Stay updated with emerging threats, attacker TTPs, and MITRE ATT&CK techniques

Required Skills

• Strong understanding of networking, operating systems (Windows/Linux), and security concepts
• Hands-on experience with SIEM tools (Splunk, QRadar, Sentinel, etc.)
• Experience with EDR/XDR solutions (CrowdStrike, Defender, Carbon Black, etc.)
• Knowledge of MITRE ATT&CK framework
• Log analysis and threat intelligence correlation
• Incident response and malware analysis basics

Preferred Qualifications

• 2–6 years of experience in SOC, Blue Team, or Threat Hunting
• Certifications such as GCED, GCIA, GCIH, CEH, or similar
• Experience with cloud security (AWS, Azure, GCP)
• Familiarity with SOAR tools and automation