Threat Hunting Consultant

Title: Security Consultant Location - Austin, TX Cyber Security assessment Analyst conducts and supports the cyber security controls risk assessment and management process acro…

• 14 hours ago
• Apply easily

Extensive hands-on experience with Microsoft Defender for Endpoint (MDE) Proficiency with Microsoft 365 Defender (XDR) unified security operations Advanced knowledge of Kusto Query Language (KQL) for threat hunting and detection Deep understanding of MDE investigation capabilities, automated response features, and integration architecture SIEM and Analytics Expert-level Splunk Enterprise Security experience Proficiency in Splunk Processing Language (SPL) for complex correlation and hunting queries Experience with Splunk User Behavior Analytics (UBA) or similar behavioral detection platforms Knowledge of SIEM architecture, data onboarding, and optimization techniques Threat Hunting and Detection Engineering Demonstrated experience conducting hypothesis-driven threat hunts Strong understanding of MITRE ATT&CK framework and its practical application Ability to translate threat intelligence and attack research into actionable hunting queries Experience developing high-fidelity detection rules with low false positive rates Knowledge of adversary tactics, techniques, and procedures (TTPs) across multiple threat actor groups Incident Response Proven track record in hands-on incident response and investigation Expertise in endpoint forensics and malware analysis Familiarity with incident response frameworks (NIST, SANS) and playbook development Experience with containment, eradication, and recovery procedures for complex security incidents Understanding of forensic evidence preservation and chain of custody requirements