Security Analyst, InfoSec (Threat Hunting)

About the role

Kroll is seeking a Security Analyst to join its InfoSec team in Mumbai. The analyst will focus on proactive threat hunting, using hypothesis‑driven investigations to uncover hidden adversaries and strengthen the SOC.

Key responsibilities

• Develop and test hypotheses based on threat intelligence, anomalies, and attack patterns to hunt for malicious activity.
• Analyze logs, network traffic, endpoints, and telemetry data with SIEM, EDR and custom scripts to detect stealthy attacks.
• Document findings, create repeatable hunt playbooks, and work with detection engineering to automate responses.
• Research emerging threats, malware, and TTPs; generate reports and recommend mitigations.
• Conduct threat‑hunting campaigns, assess vulnerabilities, and support incident response while optimizing hunting tools and processes.

Required profile

• Bachelor's degree in Cybersecurity, Computer Science or a related field.
• 5+ years of hands‑on experience in SOC, incident response and threat hunting.
• Advanced certifications such as GCTI, CTIA or OSCP are preferred.
• Strong analytical skills and solid knowledge of the MITRE ATT&CK framework.
• Understanding of cloud and network security concepts.

Required skills

• CrowdStrike Falcon
• Splunk
• Wireshark
• YARA
• Python for scripting and automation
• SIEM platforms
• EDR tools