Threat Hunting- AM / DM

Deloitte Shared Services India; Navi Mumbai; Sur place; INR 900 000 - 1 400 000; Plein temps

Résumé du poste

Deloitte Shared Services India in Navi Mumbai seeks a proactive Threat Hunter to identify advanced threats beyond standard security controls. You will analyze logs, hunt hypotheses, and leverage threat intelligence to understand attacker tactics and improve client defenses.

You will create daily advisories, weekly tactical briefs, and monthly strategic reports, and collaborate with client Red Team, IT, and CSIRT to refine SOC use cases and detection rules.

Qualifications

• Proactive threat hunting to detect signs of malicious activity beyond traditional systems.
• Utilize threat intelligence to identify threats and understand attacker TTPs.
• Develop hypotheses to identify misconfigurations and improve prevention/detection strategies for clients.
• Analyze logs and user behavior in SIEM to identify anomalies.

Responsabilités

• Create threat advisories with mitigation recommendations.
• Understand TTPs used by threat actors and APT groups for client attacks.
• Conduct analysis on emerging threats and threat intel data to proactively identify risks.
• Collaborate with clients Red Team, IT and CSIRT during threat hunting and help develop SOC content and use cases.
• Prepare and share daily threat advisories, weekly tactical briefs, and fortnightly strategic advisories.
• Produce monthly reports/dashboards summarizing hunting activities and actionable use cases.

Connaissances

Threat hunting

Threat intelligence

Hypothesis development

Anomaly detection

Outils

SIEM

Threat intel platforms

Description du poste

Role & responsibilities

• Conduct proactive hypothesis-bases threat hunting activity to actively search for signs of malicious activity that may not be detected by traditional security systems.
• Utilize threat intelligence from various platform in scope to identify potential threats and understand adversary tactics.
• Developing hypothesis to perform threat hunts which will help to identify misconfiguration and contribute to redefine prevention & detection strategy for client
• Analyze log, system and user behavior from available logs in SIEM to identify anomalies and potential threats.

Preferred candidate profile

• Create threat advisories to recommend mitigation strategies to address identified threats
• Understand the tactics, techniques, and procedures (TTPs) used by threat actors and APT groups for targeted attacks at the client's org.
• Conduct analysis on emerging threats and threat intelligence data to proactively identify potential risks.
• Participate with Clients Red Team, IT and CSIRT teams in threat hunting activities and provide feedback for Client’s SOC Content Development to create use case.
• Prepare and share daily threat intelligence advisories with classification, a weekly tactical advisory, and a fortnightly strategic advisory.
• Reports, dashboards and/or presentation on threat advisories and findings, including summary of hunting activities and actionable use cases on a monthly basis.