Threat hunting

Tata Consultancy Services; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Tata Consultancy Services invites qualified candidates for a Threat Hunting and Analysis role. The incumbent will conduct hypothesis- and data-driven threat hunts across endpoints, networks, and cloud, using MITRE ATT&CK and threat intel sources.

The role covers building detection logic, writing complex queries, and collaborating with SOC & IR teams to contain and remediate threats. Face-to-face walk-in interviews in Bengaluru are expected.

Qualifications

• Experience in Threat Hunting, SOC, Incident Response, or Cyber Defense.
• Strong understanding of MITRE ATT&CK Framework.
• Hands-on experience with SIEM/EDR/XDR tools such as Splunk, Sentinel, QRadar, ELK.
• Ability to write complex queries.
• Experience analyzing malicious files, scripts, and techniques used by APT groups.
• Strong analytical, investigative, and problemsolving skills.

Responsibilities

• Conduct hypothesis-driven and data-driven threat hunting across endpoints, networks, cloud, and identity systems.
• Identify anomalous behaviors, TTPs, and indicators of compromise using MITRE ATT&CK and threat intel sources.
• Perform deep-dive investigations into suspicious activities, lateral movement, privilege escalation, and persistence techniques.
• Analyze logs, telemetry, and events from SIEM, EDR, XDR, NDR, Firewall, and Cloud security tools.
• Develop new detection rules, signatures, and behavioral analytics to improve SOC detection capabilities.
• Validate, tune, and optimize detection logic to reduce false positives.
• Translate threat intel into actionable hunting queries, playbooks, and detection rules.
• Collaborate with SOC Analysts and Incident Response teams during investigations.
• Provide recommendations for containment, remediation, and hardening.
• Perform root-cause analysis on identified threats.
• Prepare detailed hunt reports, findings, and risk insights for leadership.
• Document new hunting methodologies, playbooks, and detection logic.

Skills

Threat Hunting

SOC

Incident Response

Cyber Defense

Analytical Thinking

Problem Solving

Tools

Splunk

Sentinel

QRadar

ELK

Job description

Interview Mode: Face to Face (Walkin) Interview

Date: 29th Aug 2026(Saturday)

Proactive Threat Hunting

• Conduct hypothesis-driven and data-driven threat hunting across endpoints, networks, cloud, and identity systems.
• Identify anomalous behaviors, TTPs, and indicators of compromise using MITRE ATT&CK and threat intel sources.
• Perform deep-dive investigation into suspicious activities, lateral movement, privilege escalation, and persistence techniques.

Analysis & Detection Engineering

• Analyze logs, telemetry, and events from SIEM, EDR, XDR, NDR, Firewall, and Cloud security tools.
• Develop new detection rules, signatures, and behavioral analytics to improve SOC detection capabilities.
• Validate, tune, and optimize detection logic to reduce false positives.
• Consume threat intel reports, IOCs, malware analysis feeds, and emerging threat trends.
• Translate threat intel into actionable hunting queries, playbooks, and detection rules.
• Collaborate with SOC Analysts and Incident Response teams during investigations.
• Provide recommendations for containment, remediation, and hardening.
• Perform root-cause analysis on identified threats.

Reporting & Documentation

• Prepare detailed hunt reports, findings, and risk insights for leadership.
• Document new hunting methodologies, playbooks, and detection logic.

Required Skills and Qualifications

• Experience in Threat Hunting, SOC, Incident Response, or Cyber Defense.
• Strong understanding of:
• MITRE ATT&CK Framework.
• Hands-on experience with SIEM/EDR/XDR tools such as:
• Splunk, Sentinel, QRadar, ELK.
• Ability to write complex queries using:
• Experience analyzing malicious files, scripts, and techniques used by APT groups.
• Strong analytical, investigative, and problemsolving skills.