Assistant Manager - Platform Engineering

Develop and execute threat hunting plans to identify advanced cyber threats like APT activities, malware, and zero-day exploits within customer infrastructures.

Continuously research evolving threat landscapes, create hunting hypotheses using MITRE ATT&CK framework, and provide actionable threat intelligence and incident response recommendations to SOC teams.

Contribute to the strategic development of Threat Hunting and Incident Response capabilities and perform proactive analysis using EDR tools and network/system internals knowledge.

Minimum 4 years overall experience with at least 2 years in Threat Hunting and Security Incident Response.

Hands-on experience with threat hunting hypothesis creation, active hunting executions, EDR tools (e.g., CrowdStrike, MD-ATP, TrendMicro, Sentinel-One, Kaspersky), and writing YARA or KQL queries.

Strong understanding of Windows, Linux, OSX OS internals, AD architecture, networking protocols (TCP/IP, HTTP, DNS, SMTP, RPC), and incident response methodologies.

Preferred certification: CHFI or eCTHPv2; Work Experience Required: 4+ years total with 2+ years in relevant threat hunting roles.

Experienced in handling multi-tiered mission-critical systems with a focus on proactive identification of threats evading traditional detection/SIEM systems.

Comfortable conducting technical malware analysis, tracking attacker campaigns, and using scripting languages like Python to support hunting activities.

Strategic thinker contributing to enhancing threat hunting frameworks and able to interpret complex data to identify advanced threats and recommend incident responses.