Threat Intelligence & Threat Hunting Specialist

Persistent Systems Limited; Chennai District; Hybrid; INR 3,500,000 - 7,000,000; Full time

Benefits offered by this job

Hybrid work arrangement

Career development support

Higher education & certifications

Job summary

Persistent Systems Limited is seeking an experienced Threat Intelligence & Threat Hunting professional to strengthen our cybersecurity defense. You will lead intelligence-led detection, proactive threat hunting, and adversary-focused analysis across enterprise environments.

The role requires 8–12 years in cybersecurity, deep MITRE ATT&CK knowledge, and hands-on experience with SIEM, EDR/XDR, and TI platforms. You’ll collaborate with multiple teams to elevate detection capabilities and reporting.

Qualifications

• 8 to 12 years of cybersecurity experience with strong expertise in Threat Intelligence, Threat Hunting, Incident Response, and Security Operations.
• Extensive experience analyzing IOCs, malware artifacts, attacker infrastructure, and adversary campaigns.
• Deep knowledge of MITRE ATT&CK Framework and common threat actor tactics, techniques, and procedures.
• Hands-on experience with SIEM, EDR/XDR, Threat Intelligence Platforms, and security analytics solutions.
• Expertise in designing and leading structured and exploratory threat hunting campaigns.
• Strong analytical writing skills with experience producing intelligence reports for technical, operational, and executive audiences.

Responsibilities

• Analyze IOCs including IPs, domains, URLs, file hashes, certificates and adversary infrastructure.
• Enrich threat intelligence into actionable insights and validate indicators.
• Design and lead proactive threat hunting campaigns based on adversary behavior.
• Identify stealthy malicious activities that evade traditional controls and monitoring.
• Track threat actors and maintain profiles including TTPs.
• Map attacker behaviors to MITRE ATT&CK and analyze emerging tactics.
• Produce executive-ready intelligence reports with findings and business relevance.
• Translate hunting outcomes into detection engineering and monitoring improvements.
• Collaborate with SOC, IR, Identity, Endpoint, Cloud and Infrastructure teams to enhance detection.
• Define operational standards, mentor junior analysts, and support governance.
• Represent threat intel during security reviews and leadership briefings.

Skills

Threat Intelligence

Threat Hunting

Incident Response

Security Operations

Analytical writing

Leadership

Education

GCTI

CISSP

GCIA

GCIH

GCFA

Tools

SIEM

EDR/XDR

Threat Intelligence Platforms

Security analytics tools

Python

PowerShell

KQL

SPL

Job description

Job Description

About Persistent

We are an AI-led, platform-driven Digital Engineering and Enterprise Modernization partner, combining deep technical expertise and industry experience to help our clients anticipate what’s next. Our offerings and proven solutions create a unique competitive advantage for our clients by giving them the power to see beyond and rise above. We work with many industry-leading organizations across the world, including 20 Fortune 50 companies and 4 of the 5 top banks in both the US and India, and numerous innovators across the healthcare ecosystem.

We are seeking experienced Threat Intelligence & Threat Hunting professionals to strengthen our cybersecurity defense capabilities through intelligence-led detection, proactive threat identification, and adversary-focused analysis. This role is pivotal in enhancing our security posture by conducting in-depth analysis and leading proactive threat hunting initiatives across enterprise environments.

• Experience: 8 to 12 Years
• Job Type: Full-Time Employment

What You'll Do:

• Analyze Indicators of Compromise (IOCs) including IP addresses, domains, URLs, file hashes, certificates, and adversary infrastructure.
• Enrich raw threat intelligence into actionable security insights and validate the relevance and reliability of threat indicators.
• Design and lead proactive threat hunting campaigns based on adversary behavior, attack patterns, and observed trends.
• Identify stealthy malicious activities that may evade traditional security controls and monitoring systems.
• Track threat actors and maintain profiles including Tactics, Techniques, and Procedures (TTPs).
• Map observed attacker behaviors to frameworks such as MITRE ATT&CK.
• Conduct analysis of emerging adversarial tactics, malware campaigns, and threat trends impacting the organization.
• Produce executive-ready and technical threat intelligence reports with clear findings, recommendations, and business relevance.
• Translate threat hunting outcomes into actionable detection engineering and monitoring improvements.
• Collaborate with SOC, Incident Response, Threat Intelligence, Identity, Endpoint, Cloud, and Infrastructure teams to enhance detection capabilities.
• Define operational standards, mentor junior analysts, and support governance initiatives.
• Represent the threat intelligence function during security reviews, leadership briefings, and operational discussions.

Expertise You'll Bring:

• 8 to 12 years of cybersecurity experience with strong expertise in Threat Intelligence, Threat Hunting, Incident Response, and Security Operations.
• Extensive experience analyzing IOCs, malware artifacts, attacker infrastructure, and adversary campaigns.
• Deep knowledge of MITRE ATT&CK Framework and common threat actor tactics, techniques, and procedures.
• Hands-on experience with SIEM, EDR/XDR, Threat Intelligence Platforms, and security analytics solutions.
• Expertise in designing and leading structured and exploratory threat hunting campaigns.
• Strong analytical writing skills with experience producing intelligence reports for technical, operational, and executive audiences.
• Strong collaboration and communication skills across technical and non-technical stakeholders.
• Experience with Identity and Access Management (IAM) and Microsoft Entra ID.
• Familiarity with enterprise-scale cybersecurity operations and global security environments.
• Knowledge of cloud security telemetry across AWS, Azure, and GCP environments.
• Experience analyzing identity, authentication, endpoint, network, and cloud-based security events.
• Understanding of malware analysis, reverse engineering concepts, and digital forensics methodologies.
• Experience with automation, scripting, enrichment workflows, and security operations optimization.
• Proficiency with Python, PowerShell, KQL, SPL, or similar security analytics and automation technologies.
• Relevant certifications such as GCTI, CISSP, GCIA, GCIH, GCFA, or equivalent are preferred.
• Strong ability to work effectively with incomplete, noisy, or rapidly evolving threat intelligence data.
• Proven capability to prioritize threats based on business impact, risk exposure, and operational relevance.
• Excellent report-writing, presentation, and stakeholder engagement skills.
• Strong leadership and mentoring capabilities for guiding threat analysts and hunting teams.
• Continuous learning mindset with a commitment to staying current on emerging cyber threats, threat actor behaviors, and security technologies.
• Professional judgment and confidentiality when handling sensitive intelligence and security information.
• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment

“Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind.”