Cyber Threat Investigator

JOB Description

Required Skill

expert Splunk ES, SPL, Splunk UBA.

· Threat hunting/DE: hypothesis-driven hunts, MITRE ATT&CK, high-fidelity detection rule development.

endpoint forensics, malware analysis, NIST/SANS frameworks, containment/eradication/recovery.

Windows internals, network protocols, AD/Azure AD/Kerberos/NTLM, PowerShell/Python.

· Certs (preferred): GCTI, GCIH, GCFA, CTIA (highly valued); SC-200, Splunk ES Admin, CISSP/CISM, OSCP (relevant).

· Soft skills: strong teaching/knowledge-transfer ability, excellent communication, self-directed problem solving.