Threat Hunting Expert

Responsibilities:

• Lead Digital Forensics and Incident Response (DFIR) investigations, identifying, analyzing, and mitigating cyber threats.
• Lead the technical communication and cooperation with customers at risk in DFIR investigations.
• Perform proactive threat-hunting activities to detect and neutralize potential security incidents before they escalate.
• Analyze logs and artifacts from various sources (network, endpoint, cloud) to identify suspicious activity and determine attack vectors.
• Develop and implement threat detection mechanisms, including custom alerts and automated responses.
• Collaborate with security operations and engineering teams to enhance incident detection, response processes, and threat intelligence sharing.
• Provide post-incident analysis, reporting on root cause, impact, and actionable improvements.
• Stay up-to-date with the latest threat intelligence, malware techniques, and emerging cyber threats.

Requirements:

• At least 4 years of experience in DFIR and threat hunting in cybersecurity.
• Strong expertise in forensic tools (e.g., EnCase, FTK, Wireshark) and SIEM platforms (e.g., Splunk, QRadar).
• Proficiency in threat-hunting techniques, malware analysis, and reverse engineering.
• Understanding of common attack methods and TTPs (Tactics, Techniques, and Procedures).
• Ability to write scripts to automate data collection and analysis (e.g., Python, PowerShell).
• Proven ability to effectively present complex technical solutions in English and Hebrew to clients.
• Experience working with large corporate/enterprise clients.
• Excellent interpersonal communication skills, including the ability to write and present technical information in both English and Hebrew.
• Strong analytical skills with attention to detail and problem-solving capabilities.
• Practical communication skills to convey findings and recommendations.

Additional Skills:

• Relevant certifications (e.g., GCFA, GCIH, OSCP, CISSP).
• Familiarity with MITRE ATT&CK framework and other threat intelligence resources.
• Ability to work effectively in high-stress situations with a calm and strategic approach.