Threat Investigator

Responsibilities: of the Threat Investigator: • Conduct proactive threat hunting activities across enterprise environments to identify indicators of compromise and malicious behavior. • Investigate security alerts, incidents, and anomalies to determine scope, impact, and root cause. • Analyze threat intelligence, attacker tactics, techniques, and procedures (TTPs), and emerging cyber risks. • Correlate data from security tools including SIEM, EDR, IDS/IPS, and network monitoring platforms. • Develop and document investigative findings, response actions, and recommendations for security improvements. • Collaborate with incident response, SOC, engineering, and infrastructure teams to remediate identified threats. • Create and maintain threat detection logic, use cases, and investigative playbooks. • Support digital forensic investigations and evidence collection efforts when necessary. Qualifications: of the Threat Investigator: • 4+ years of experience in cyber threat investigation, threat hunting, incident response, or security operations. • Experience utilizing SIEM platforms such as Splunk, Sentinel, QRadar, or similar technologies. • Strong understanding of threat intelligence frameworks, including MITRE ATT&CK. • Hands-on experience with endpoint detection and response (EDR) tools and security monitoring technologies. • Proficiency analyzing Windows, Linux, cloud, and network security events. • Familiarity with malware analysis principles and digital forensics methodologies. • Strong analytical, communication, and documentation skills. • Relevant certifications such as GCIH, GCFA, GCIA, CISSP, Security+, or comparable certifications are preferred. • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field preferred.