Digital Forensics & Incident Response-Threat Hunter Lead

As a Cybersecurity Specialist, you will be at the forefront of protecting Kyndryl's customers computer systems and networks from unauthorized access, use, disclosure, disruption, modification, or destruction. You will use a variety of tools and techniques to defend against a wide range of cyber threats, such as malware, ransomware, phishing attacks, and data breaches.

But that's not all at Kyndryl, you will also have the opportunity to implement new cybersecurity systems and policies to ensure the protection of our customers data and assets. You will monitor and review potential threats from various cybersecurity systems and conduct proof-of-concepts (POCs) with new cyber security software to evaluate its effectiveness and potential integration into the organization's systems.

Not only will you be responsible for ensuring the security of Kyndryl's customers network and systems, but you will also enrich the organizations knowledge towards potential cyber threats and best practices. You will provide automation scripts for threat hunting in customer environments using lessons learned from Cyber-attacks.

You will also have the opportunity to conduct penetration testing and threat and vulnerability assessments of applications, operating systems, and networks, responding to cybersecurity breaches and identifying intrusions. You will research and evaluate cybersecurity threats and perform root cause analysis, all while assisting in the creation and implementation of security solutions.

Additionally, you will have the opportunity to work in the area of security innovation, creating and experimenting with “outside the box” ideas that could change the trajectory of cyber security.

This is a unique opportunity to work with cutting-edge technology, be part of a dynamic team, and make a significant impact in the world of cybersecurity. If you're up for the challenge, apply now to join Kyndryl's cybersecurity team!

Your Future at Kyndryl
Every position at Kyndryl offers a way forward to grow your career. We have opportunities that you won’t find anywhere else, including hands-on experience, learning opportunities, and the chance to certify in all four major platforms. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here.

Role & responsibilities:

You’re good at what you do and possess the required experience to prove it. However, equally as important – you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused – someone who prioritizes customer success in their work. And finally, you’re open and borderless – naturally inclusive in how you work with others.

Required Skills and Experience:

• Having 7+years of Experience in DFI/Threat Hunter Lead the development of threat hunting hypotheses using threat intelligence, MITRE ATT&CK, and kill chain models
• Guide the team in conducting hunts across SIEM, EDR/XDR, and network telemetry to uncover hidden threats
• Validate and refine threat intelligence to ensure it is actionable and relevant
• Translate hunting outcomes into detection logic and use cases for SIEM and SOAR platforms
• Collaborate with content developers to build and tune correlation rules and analytics
• Identify gaps in visibility and recommend improvements to logging and telemetry coverage
• Escalate confirmed findings to L3 incident response teams with detailed evidence and RCA
• Recommend preventive and detective countermeasures (e.g., policy changes, new rules)
• Support RCA documentation and post-incident reviews
• Perform forensic acquisition and analysis of endpoints, servers, and cloud workloads involved in security incidents
• Extract and preserve digital evidence in accordance with legal and compliance standards.

Preferred Skills and Experience:

• Conduct timeline analysis, memory forensics, and disk image reviews to reconstruct attacker activity
• Deliver weekly/monthly reports on threat hunting activities, findings, and trends
• Participate in governance forums and contribute to executive dashboards
• Ensure alignment with SLA/KPI metrics and compliance requirements
• Mentor junior threat hunters and analysts on hypothesis building, investigation techniques, and tool usage
• Conduct knowledge-sharing sessions and contribute to skills development plans
• Coordinate with CTI, SOC, and engineering teams to align hunting with broader security goals