Analyst - Threat Hunting

About the role

KPMG India is seeking a proactive Threat Hunting Analyst to join its cybersecurity team. You will work across network, endpoint, and cloud environments to uncover malicious activity and strengthen our security posture.

Key responsibilities

• Conduct proactive threat hunting using logs and telemetry from SIEM and EDR tools.
• Develop and test hypothesis‑driven hunting techniques.
• Identify Indicators of Compromise (IOCs) and Indicators of Attack (IOAs).
• Perform deep‑dive investigations on alerts from SIEM/EDR platforms.
• Document findings and recommend remediation actions.
• Collect, analyze, and operationalize threat intelligence from internal and external sources.
• Monitor emerging threats, vulnerabilities, and attacker tactics using the MITRE ATT&CK framework.
• Produce actionable intelligence reports for security teams and stakeholders.
• Maintain and update threat intelligence feeds and enrichment processes.
• Automate detection using scripts or SOAR tools and assist in incident containment and root‑cause analysis.

Required profile

• 2+ years of experience in cybersecurity, threat hunting, or threat intelligence.
• Strong understanding of network protocols, operating system internals, and the cyber kill chain.
• Familiarity with malware behavior, attack techniques, and basic forensics.

Required skills

• TCP/IP, DNS, HTTP protocols
• Windows and Linux internals
• MITRE ATT&CK framework
• SIEM platforms (Splunk, QRadar, Sentinel)
• Endpoint detection and response tools (CrowdStrike, Defender, Carbon Black)
• Threat intelligence platforms
• Log analysis from firewalls, IDS/IPS, cloud platforms
• Scripting for automation
• Security Orchestration, Automation and Response (SOAR) tools