Microsoft Defender - Threat Hunter

As a Cybersecurity Defense professional at Kyndryl, you will encompass cybersecurity, incident response, security operations, vulnerability management, and the world of cyber threat hunting and security intelligence analysis all to protect the very heartbeat of organizations their infrastructure.
In this role, you won't just monitor; you'll actively engage in the relentless hunt for cyber adversaries. In a world where every click and keystroke could be a potential gateway for attackers, your role will be nothing short of critical as you seek out advanced threats, attackers, and Indicators of Compromise (IOCs). Your expertise in endpoint detection and response (EDR) will be the shield that safeguards individual workstations, laptops, servers, and other devices from cybercrime. Your responsibilities go beyond vigilance. When it comes to network security, you'll utilize Network Detection and Response (NDR) to monitor the ever-flowing currents of network traffic. The incident management process will be used as you respond and manage to cybersecurity incidents.Cybersecurity Defense is all about information. You'll gather, analyze, and interpret data applying your own and external threat intelligence to uncover potential security threats and risks. These insights and your ability to analyze complex attack scenarios will be the foundation of our security strategy helping Kyndryl stay one step ahead of security breaches.In Cybersecurity Defense at Kyndryl, youre not just protecting the present youre shaping the future of digital security. Join us on this cybersecurity venture where your expertise and creativity will have a lasting impact in the world of digital defense.Who You Are

Youre good at what you do and possess the required experience to prove it. However, equally as important you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused someone who prioritizes customer success in their work. And finally, youre open and borderless naturally inclusive in how you work with others.
Required Skills and Experience

• 8+ years of experience in a technical role in the areas of Security Operations, Threat Intelligence, Cyber Incident Response, or Penetration Testing/Red Team.
• Advanced knowledge of operating system internals and security mechanisms.
• Experience analyzing attacker techniques that leverage email and cloud-service tactics.
• Skilled working with extremely large data sets, using tools and scripting languages such as: Excel, SQL, Python, Splunk, and PowerBI.

Preferred Skills and Experience

• Knowledge of operating system internals, OS security mitigations & understanding of Security challenges in Windows, Linux, Mac, Android & iOS platforms
• Knowledge of kill-chain model, ATT&CK framework, and modern penetration testing techniques
• Excellent cross-group and interpersonal skills, with the ability to articulate business need for detection improvements
• Knowledge of major cloud and productivity platforms as well as identity systems and related security concerns
• Experienced with curation of Threat Intelligence
• Experienced with direct customer communication in a service delivery role
• Ability to use data to 'tell a story'
• Experience with reverse engineering, digital forensics (DFIR) or incident response, or machine learning models
• Experience with system administration in a large enterprise environment including Windows and Linux servers and workstations, network administration, cloud administration
• Experience with offensive security including tools such as Metasploit, exploit development, Open Source Intelligence Gathering (OSINT), and designing ways to breach enterprise networks
• Additional advanced technical degrees or cyber security certifications such as CISSP, OSCP, CEH, or GIAC certifications