Senior Threat Hunting (Lead)

About the role

We are seeking a Senior Threat Hunter to lead hypothesis-driven, intelligence-led hunts across enterprise, cloud, and OT/IoT environments. This role proactively identifies adversary tradecraft that evades existing detections, operationalizes findings into durable detection logic, and partners with Threat Intelligence, Detection Engineering, IR, Exposure Management, and REM to reduce dwell time and shrink the enterprise exposure plane.

What you'll do

• Lead hypothesis-driven, intelligence-led hunt campaigns from formulation through reporting, mapped to MITRE ATT&CK
• Design and execute custom analytics against large-scale security telemetry (SIEM, EDR/XDR, identity, cloud
• Perform identity-centric hunting across Entra ID, Active Directory, and SaaS platforms - token theft, session hijacking, MFA bypass, OAuth abuse
• Conduct cloud-native hunting across AWS, Azure, M365, and SaaS control planes, including audit logs, identity events, and workload telemetry
• Convert hunt findings into durable detections, signatures, and SOAR playbooks in partnership with Detection Engineering, closing the hunt-to-detect loop

What you need

• 7–13 yrs of experience
• SIEM
• EDR
• Splunk
• OWASP
• Python
• LLMs
• B.Tech or B.E. or B.Sc or BCA or M.Tech or MCA or M.Sc

Good to have

• Penetration testing
• CISSP
• CEH
• Kubernetes
• Incident response
• TCP/IP