SME Threat Hunting and IR

Introduction

Threat Hunting

Your role and responsibilities

• Design and execute proactive threat hunting campaigns using advanced tools and techniques.
• Analyse security telemetry, logs, and network data to identify indicators of compromise (IOCs).
• Continuously improve hunting methodologies based on emerging threats and intelligence.
• Work closely with SOC analysts to escalate findings and support investigations.
  

Threat Intelligence

• Collect, analyse, and disseminate actionable threat intelligence to internal teams.
• Monitor global threat landscape and security bulletins to identify relevant threats.
• Establish and maintain relationships with external threat intelligence communities and vendors.
• Integrate threat intelligence feeds into security controls and detection mechanisms.
  

Incident Response SME

• Lead and coordinate response activities during cybersecurity incidents.
• Conduct root cause analysis, containment, eradication, and recovery efforts.
• Develop and maintain incident response plans, playbooks, and runbooks.
• Provide training and guidance to incident response teams and stakeholders.
• Ensure compliance with regulatory and organizational requirements related to incident handling.
  

Preferred Education

Required Technical And Professional Expertise

• Bachelor’s degree in Computer Science, Information Security, or related field; advanced certifications preferred (e.g., CISSP, GIAC, CISM, CEH).
• Proven experience (7+ years) in cybersecurity roles focused on threat modelling, hunting, intelligence, and incident response.
• Strong knowledge of cybersecurity frameworks (MITRE ATT&CK, NIST, OWASP).
• Hands-on experience with SIEM platforms, EDR tools, foundation level forensics, and threat intelligence platforms.
• Experience with cloud security and threat modelling in cloud environments.
• Familiarity with malware analysis and reverse engineering.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work under pressure and coordinate across teams during security incidents.
  

Preferred Technical And Professional Experience

• Proficient in scripting and automation (Python, PowerShell, or similar).