Threat hunting

JobrapidoBengaluru, Karnataka, IndiaAdded 1d ago

Security Analyst

Free to start · No card · 5 credits the moment you sign up

Job description

Company: TCS Skill: Threat Hunting / Modeling Experience: 6 to 15 Years Location: Bengaluru Interview Mode: Face to Face (Walkin) Interview Date: 29th Aug 2026(Saturday) Job description: Proactive Threat Hunting Conduct hypothesis-driven and data-driven threat hunting across endpoints, networks, cloud, and identity systems. Identify anomalous behaviors, TTPs, and indicators of compromise using MITRE ATT&CK and threat intel sources. Perform deep-dive investigation into suspicious activities, lateral movement, privilege escalation, and persistence techniques. Analysis & Detection Engineering Analyze logs, telemetry, and events from SIEM, EDR, XDR, NDR, Firewall, and Cloud security tools. Develop new detection rules, signatures, and behavioral analytics to improve SOC detection capabilities. Validate, tune, and optimize detection logic to reduce false positives. Threat Intelligence Integration Consume threat intel reports, IOCs, malware analysis feeds, and emerging threat trends. Translate threat intel into actionable hunting queries, playbooks, and detection rules. Incident Response Support Collaborate with SOC Analysts and Incident Response teams during investigations. Provide recommendations for containment, remediation, and hardening. Perform root-cause analysis on identified threats. Reporting & Documentation Prepare detailed hunt reports, findings, and risk insights for leadership. Document new hunting methodologies, playbooks, and detection logic. Required Skills and Qualifications Experience in Threat Hunting, SOC, Incident Response, or Cyber Defense. Strong understanding of: MITRE ATT&CK Framework. Windows/Linux internals. Network protocols (TCP/IP, DNS, etc.). Cloud platforms (AWS, Azure, GCP). Hands-on experience with SIEM/EDR/XDR tools such as: Splunk, Sentinel, QRadar, ELK. CrowdStrike, Defender ATP, Tanium, Carbon Black, Palo Alto Cortex. Ability to write complex queries using: KQL, SQL, SPL, YARA, Sigma rules. Experience analyzing malicious files, scripts, and techniques used by APT groups. Strong analytical, investigative, and problemsolving skills.

Prepare your application

Use the description above to assess your fit for Jobrapido. This checklist is guidance from Resumize, rather than additional requirements from the employer. Imported listings can be shortened or change after collection, so confirm the complete description and current availability before sending an application.

Match requirements to evidence

Identify the responsibilities and skills the employer explicitly names. For each important requirement, choose one example from your work, education, training, or projects. Explain what you did, how you did it, and what changed as a result. Include a measurable outcome when you can support it. If you lack a requirement, describe related experience accurately instead of adding an unfamiliar skill to your resume.

Put the most relevant examples near the top of your resume. Keep job titles, dates, qualifications, and contact details consistent across your application materials. Use the employer’s terminology when it describes your experience accurately; a copied list of keywords does not explain your contribution. A short, specific bullet is easier to review than a paragraph that mixes several unrelated duties.

Check the working arrangement

Confirm the location, schedule, employment type, and any eligibility requirements on the employer’s site. A remote label does not establish worldwide eligibility or flexible hours. If compensation, benefits, equipment, travel, or contract duration are missing from this listing, write down your questions for the recruiter. Do not assume details from another opening at the same company apply to this role.

Review before submitting

Follow the employer’s requested file format and application instructions. Open your exported resume and check that its text is selectable, its sections read in order, and its links work. Proofread names, dates, and contact information. Share confidential work samples only when you have permission, and use an anonymized example when necessary.

Submit through a trusted employer or recruiting destination. If the original listing has disappeared, search the employer’s careers page for the title rather than assuming the vacancy remains open. Save the application date, job reference, and the version of your resume you sent. Those details help you prepare for a later conversation and avoid submitting conflicting information through several job boards.

Review your resume for writing and readability feedback, or browse other openings if this opportunity is unavailable.