Threat Intelligence Engineer

Job Title: Threat Intelligence & Incident Response Engineer

Key Responsibilities:

• Configure and manage Suricata IDS/IPS sensors for network monitoring.
• Deploy and integrate TheHive for case management and IR automation.
• Set up MISP for threat intelligence feeds and correlation with SOC events.
• Work with Wazuh & ElasticSearch to correlate logs with IDS and TI data.
• Develop automated SOC workflows (SOAR-style) for incident triage and escalation.
• Conduct threat hunting and provide insights to improve detection rules.

Requirements:

• Hands-on experience with Suricata, TheHive, MISP (any two required, all three ideal).
• Strong background in log analysis and incident response.
• Familiarity with MITRE ATT&CK framework and detection engineering.
• Knowledge of network protocols, malware indicators, and threat intel sources.
• Experience with automation (Python, REST APIs, Ansible).

Kindly share your acknowledgment to process your candidature

Regards, 

Aayushi Rathod

Team HR

+91-9772282141

www.progression.com