Walk-in || Threat Analyst

Job description

Job Description, EXp in detection/threat hunting/IR; min. 2 yrs hands-on MDEin enterprise. MDE, M365 Defender (XDR), advanced KQL. SIEM/Analytics:expert Splunk ES, SPL, Splunk UBA. Threat hunting/DE :hypothesis-driven hunts, MITRE ATT&CK, high-fidelity detection rule development. Windows internals, network protocols, AD/Azure AD/Kerberos/NTLM, PowerShell/Python. endpoint forensics, malware analysis, NIST/SANS frameworks, containment/eradication/recovery. Preferred candidate profile Certs (preferred):GCTI, GCIH, GCFA, CTIA (highly valued); SC-200, Splunk ES Admin, CISSP/CISM, OSCP (relevant).