Senior Lead, Security(L3 Threat Hunter)
Employer · Kyndryl
Security guardFlexibleFull-timeBudapest
We're looking for a Cyber Threat Hunting expert to proactively identify malicious activity that has evaded traditional security controls by leveraging intelligence-driven, behavioral, situational, and hypothesis-based hunting methodologies. You will transform large-scale security telemetry, attacker tradecraft, and cyber threat intelligence into actionable hunting activities.
Tasks
- Transform large-scale security telemetry, attacker tradecraft, and cyber threat intelligence into actionable hunting activities, detection opportunities, and security improvements.
- Investigate emerging threats, uncover hidden adversary activity, and continuously improve detection coverage across enterprise environments in close collaboration with Threat Intelligence, Detection Engineering, Incident Response and SOC teams.
Conditions & benefits
Flexible environmentExperience a flexible, supportive environment where your well-being is prioritized.Be Well programsPrograms designed to support your financial, mental, physical, and social health.Learning and developmentAccess to cutting-edge learning opportunities and certifications with Microsoft, Google, and Amazon.
Requirements
- 5 years of relevant cyber security industry experience in roles such as Threat Hunting, Detection Engineering, Digital Forensics, Incident Response or Penetration tester.
- Strong capability in enterprise log analytics, with proficiency in platforms such as Microsoft Sentinel, Qradar, Elastic, Splunk, Palo Alto XSIAM or similar solutions.
- Demonstrable experience conducting hypothesis-driven threat hunts based on large-scale telemetry and security logs.
- Strong analytical skills and problem-solving thinking, combined with a structured, investigative approach.
- Deep understanding of Telemetry logs.
- Deep technical understanding of attacker TTPs, intrusion lifecycle, and lateral movement behaviors.
- Advanced query development skills using KQL, SPL, ES|QL, SQL, or equivalent data exploration and analytics languages.