Track Lead - Security Analysis, SIEM

About the role

Responsible for proactively identifying, investigating, and mitigating advanced cyber threats that evade traditional, alert driven security controls. The role focuses on hypothesis-driven and intelligence-led threat hunting across endpoint, network, identity, and cloud environments to reduce dwell time and enhance detection maturity.

What you'll do

• Conduct hypothesis-based and IOC-driven threat hunting across: o Endpoint (EDR/XDR) o SIEM / Log Management platforms o Network telemetry (NDR) o Identity logs (AD /…
• Identify stealthy and advanced threats, including: o Living off the Land (LotL) techniques o Advanced Persistent Threats (APTs) o Lateral movement and privilege…
• Develop and execute MITRE ATT&CK;–aligned hunting hypotheses
• Collaborate with SOC, Incident Response, and Threat Intelligence teams
• Produce hunting reports and KPIs (dwell time reduction, hunts to detections, incidents generated)

What you need

• SIEM
• Linux
• EDR
• Firewalls
• Cloud security
• Splunk
• Any graduate

Good to have

• Python
• PowerShell
• AWS
• Office 365
• Azure
• Incident response