Security Threat Hunting Specialist
WPP (company site, opens in a new tab)On-siteDirect career pageEst. 10–20 LPA
Posted on 22 Sept
Reach people at WPP
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at WPP you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Proactively hunt for advanced cybersecurity threats using hypothesis-driven investigations based on threat intelligence and telemetry analysis across endpoints, networks, and cloud environments.
- Develop and maintain automated hunting queries and scripts; validate detection coverage through adversary emulation and purple team exercises.
- Document findings and collaborate with detection engineering and SOC teams to improve detection workflows, reduce dwell time, and strengthen organizational security resilience.
Minimum Requirements
- Strong expertise in threat hunting methodologies and frameworks (e.g., MITRE ATT&CK, TaHiTI).
- Proficiency with SIEM, EDR/XDR, NDR, and cloud-native security platforms, including log aggregation and telemetry analysis.
- Scripting skills in Python and/or PowerShell for automation and data analysis.
- Work Experience Required: Not explicitly mentioned in the JD.
Ideal Candidate Profile
- Experienced in implementing hypothesis-driven hunting workflows and integrating emerging threat intelligence into detection pipelines.
- Comfortable collaborating with SOC, IR, and engineering teams and skilled at documenting and communicating complex hunt outcomes.
- Familiar with automation-first approaches using scripting and SOAR platforms, with advanced security certifications (GIAC GCTI, GCIH, or equivalent) preferred.