Cyber Threat Investigator

JOB Description
Required Skill
expert Splunk ES, SPL, Splunk UBA.
· Threat hunting/DE: hypothesis-driven hunts, MITRE ATT&CK, high-fidelity detection rule development.
endpoint forensics, malware analysis, NIST/SANS frameworks, containment/eradication/recovery.
Windows internals, network protocols, AD/Azure AD/Kerberos/NTLM, PowerShell/Python.
· Certs (preferred): GCTI, GCIH, GCFA, CTIA (highly valued); SC-200, Splunk ES Admin, CISSP/CISM, OSCP (relevant).
· Soft skills: strong teaching/knowledge-transfer ability, excellent communication, self-directed problem solving.

Work arrangement
No