Tidak lagi menerima permohonan

SOC - Threat Hunter

DXC Consulting & Engineering ServicesPetaling Jaya, Selangor, Malaysia

30+ hari lalu

Penerangan pekerjaan

DXC Technology helps global companies run their mission‑critical systems and operations while modernising IT, optimising data architectures, and ensuring security and scalability across public, private and hybrid clouds.

Role Summary

The Threat Hunter is responsible for proactively identifying advanced threats that evade automated security defences. By leveraging threat intelligence, hypothesis‑driven investigation, and advanced analytical techniques, this role enhances the organisation’s ability to detect, understand, and respond to sophisticated cyber threats.

Key Responsibilities

Proactive Threat Hunting – Actively and iteratively search for hidden or unknown threats that may have bypassed existing security controls.
Threat Intelligence Integration – Apply threat intelligence to guide hunting efforts and identify high‑risk indicators and attack techniques.
Incident Pattern Analysis – Investigate past and ongoing incidents to detect patterns, tactics, techniques, and procedures (TTPs).
Hypothesis Development & Testing – Formulate hypotheses based on observed behaviours and intelligence, then test them through data analysis and search queries.
Advanced Tool Utilisation – Use SIEM, EDR, and other advanced tools to search for anomalies and suspicious activities across customer environments.
Cross‑Team Collaboration – Work closely with SOC analysts, detection engineers, and incident responders to operationalise hunting findings.
Documentation & Reporting – Produce clear reports and discovery write‑ups to communicate threat findings and recommended actions.
Continuous Improvement – Recommend improvements to threat detection and incident response processes based on insights gained through hunts.
Knowledge Sharing & Training – Train and mentor SOC team members on threat hunting techniques and emerging threat trends.
Ongoing Learning – Stay current with the cybersecurity threat landscape, attacker tradecraft, and evolving threat hunting methodologies.

Key Tasks & Duties

Develop and refine search queries and detection logic in monitoring platforms using intelligence‑driven hypotheses.

Identify anomalies and outliers in event data and coordinate with detection engineers to translate findings into actionable detections.

Support incident investigation efforts through coordination with clients and content managers for deeper, on‑site investigations if needed.

Provide expert threat impact analysis based on observed adversary behaviours and campaign indicators.

Required Skills & Qualifications

Strong investigative mindset with systems and design thinking capabilities.

Excellent analytical and writing skills for clear documentation and reporting.

Practical knowledge of threat‑informed defence frameworks such as MITRE ATT&CK.

Experience in hypothesis development and threat modelling methodologies.

Familiarity with log analysis, endpoint telemetry, and network traffic data.

Preferred Certifications (Nice To Have)

GIAC GREM – Reverse Engineering Malware

MAD20 – Threat Hunting Specialist

Seniority level

Entry level

Employment type

Full‑time

Job function

General Business, Management, and Business Development

Industries

IT Services and IT Consulting

#J-18808-Ljbffr

Buat amaran kerja untuk carian ini

Soc Threat Hunter • Petaling Jaya, Selangor, Malaysia