Threat-Hunting Consultant

Tanggung Jawab

Monitor the cyber threat landscape, including the surface web, deep/dark web, and organizational attack surfaces for potential threats, leaked credentials, or exposure.

Conduct proactive threat hunting activities using SIEM data and endpoint telemetry to detect suspicious patterns, anomalies, and unknown threats.

Generate and maintain Threat Hunting and Threat Intelligence products and deliverables.

Perform threat modeling and threat actor profiling using structured frameworks (e.g., MITRE ATT&CK, Cyber Kill Chain, Attack Trees, Security Cards).

• Configure, manage, and operationalize Threat Intelligence Platforms (TIP) to enrich the hunt.
• Collaborate with SOC and internal security teams to report findings, validate incidents, and enhance detection rules and analytics.

Perform Digital Forensics and Incident Response (DFIR) to analyze logs, memory, and disk images and determine root causes of security incidents.

Document hunt methodologies, tools, and insights will contribute to knowledge sharing, playbook refinement, and threat detection maturity.

Kualifikasi

Graduates from an Associate Degree, Bachelor of Applied Science or Applied Bachelor's Degree, Bachelor's Degree, or Master’s Degree from an IT-related major.

• 3-5 years of experience in threat hunting, threat intelligence, SOC, or incident response.
• Solid knowledge of attacker techniques and TTPs (MITRE ATT&CK, threat actor behaviors).
• Experience analyzing system logs, registry activity, PowerShell scripts, network traffic, and memory artifacts.
• Proficient with EDR/XDR platforms (e.g., CrowdStrike, SentinelOne, Microsoft Defender).
• Skilled in querying and analyzing large volumes of security telemetry data.
• Experience writing detection rules or Sigma/YARA signatures is a plus.
• Analytical thinking and problem-solving.
• Effective verbal and written communication of technical findings.
• Team collaboration and task ownership.