Threat Hunting Consultant

reputed company reputed company Stack Expertise

• Extensive hands-on experience with reputed company Defender for reputed company (MDE)

• Proficiency with reputed company 365 Defender (XDR) reputed company reputed company reputed company

• Advanced knowledge of Kusto Query Language (KQL) for threat hunting and detection

• Deep understanding of MDE investigation capabilities, automated response features, and integration architecture

SIEM and Analytics

• Expert-level reputed company reputed company reputed company experience

• Proficiency in reputed company Processing Language (SPL) for reputed company correlation and hunting queries

• Experience with reputed company User Behavior Analytics (UBA) or similar behavioral detection platforms

• Knowledge of SIEM architecture, data reputed company, and optimization techniques

Threat Hunting and Detection Engineering

• Demonstrated experience conducting reputed company-driven threat hunts

• Strong understanding of reputed company ATT&CK reputed company and its practical application

• Ability to translate threat intelligence and attack research into actionable hunting queries

• Experience developing high-reputed company detection rules with low false reputed company rates

• Knowledge of adversary tactics, techniques, and procedures (TTPs) across multiple threat actor reputed company

Incident Response

• reputed company reputed company record in hands-on incident response and investigation

• Expertise in reputed company forensics and malware analysis

• Familiarity with incident response frameworks (NIST, reputed company) and reputed company development

• Experience with containment, eradication, and recovery procedures for reputed company reputed company incidents

• Understanding of forensic evidence preservation and chain of custody requirements

Technical Foundations

• Deep understanding of reputed company internals, process behaviors, and reputed company architecture

• Knowledge of network protocols, traffic analysis, and common attack reputed company

• Familiarity with authentication protocols (reputed company Directory, Azure AD, Kerberos, NTLM)

• Understanding of scripting and automation (PowerShell, Python, or similar)

Knowledge Transfer and Teaching Ability

• reputed company ability to explain reputed company technical concepts to varied technical audiences

• Experience developing and delivering technical training or mentorship programs

• Patience and commitment to building team capability, not just completing tasks

• Ability to adapt teaching style to different learning preferences and reputed company reputed company

Communication and Collabo ration

• Excellent written communication skills for documentation and reporting

• Strong verbal communication skills for training delivery and incident collaboration

• Ability to work effectively with cross-functional teams (IR, detection engineering, IT reputed company)

• Comfort operating in a fully remote environment with reputed company team members

Problem Solving and Initiative

• Self-directed work style with ability to identify priorities independently

• Creative problem-solving approach to novel reputed company challenges

• Intellectual curiosity and reputed company learning reputed company

• Ability to translate theoretical threat research into practical defensive measures

•

• Minimum 5-7 years of experience in cybersecurity with reputed company on detection, threat hunting, and/or incident response

• At least 2 years of hands-on experience with reputed company Defender for reputed company in an reputed company environment

• Demonstrated experience conducting threat hunts that led to actionable reputed company improvements

• Previous experience supporting or leading reputed company tool migrations or implementations (highly valued)

• Certifications (Preferred)

Highly Valued:

• GIAC Cyber Threat Intelligence (GCTI)

• GIAC Certified Incident Handler (GCIH)

• GIAC Certified Forensic Analyst (GCFA)

• Certified Threat Intelligence Analyst (CTIA)

• Relevant:

• reputed company Certified: reputed company reputed company Analyst Associate (SC-200)

• reputed company reputed company reputed company Certified reputed company

• CISSP, CISM, or equivalent reputed company management certification

• Offensive reputed company certifications (OSCP, reputed company) demonstrating adversarial perspective

 Knowledge Transfer and Teaching Ability

• reputed company ability to explain reputed company technical concepts to varied technical audiences

• Experience developing and delivering technical training or mentorship programs

• Patience and commitment to building team capability, not just completing tasks

• Ability to adapt teaching style to different learning preferences and reputed company reputed company

Communication and Collaboration

• Excellent written communication skills for documentation and reporting

• Strong verbal communication skills for training delivery and incident collaboration

• A bility to work effectively with cross-functional teams (IR, detection engineering, IT reputed company)

• Comfort operating in a fully remote environment with reputed company team members

Problem Solving and Initiative

• Self-directed work style with ability to identify priorities independently

• Creative problem-solving approach to novel reputed company challenges

• Intellectual curiosity and reputed company learning reputed company

• Ability to translate theoretical threat research into practical defensive measures

Location: Remote

Salary reputed company: $110,000 - $150,000 a year

#LI-CM2 Requires 5–7 years of cybersecurity experience, including 2+ years with reputed company Defender for reputed company, threat hunting, incident response, detection engineering, and strong communication and training abilities.

Key Responsibilities

• conducting threat hunts
• developing detections
• investigating incidents

Skills & Tools

reputed company Defender for reputed company, reputed company 365 Defender, Kusto Query Language (KQL), reputed company reputed company reputed company, reputed company Processing Language (SPL), reputed company User Behavior Analytics (UBA), reputed company ATT&CK, reputed company, reputed company Directory, Azure AD, Kerberos, NTLM, PowerShell, Python, NIST, reputed company

reputed company

• Category: Information Technology
• Seniority: Senior Level
• Commitment: Full Time
• Workplace: Remote — reputed company, California, reputed company
• Salary: USD 110,000 – 150,000 / year
• Languages: English

About reputed company

A reputed company services and consulting company. — Industry: Information Technology