Threat Hunter – Cyber Security

About the role

We are seeking a Threat Hunter to join our Cyber Security team and proactively identify, analyse, and mitigate advanced threats targeting the bank’s IT and digital banking infrastructure. The role leverages FortiRecon, Splunk and Microsoft Sentinel to conduct hypothesis‑driven hunts in line with RBI and industry best practices.

Key responsibilities

• Conduct proactive, hypothesis‑driven threat hunting across endpoints, network, cloud and core banking‑adjacent systems using Splunk and Microsoft Sentinel.
• Monitor intelligence from FortiRecon (external attack surface, brand/phishing protection, digital risk) to identify exposures relevant to financial services.
• Interpret threat‑intel reports, CVE bulletins and sector‑specific advisories (CERT‑In, RBI/IDRBT, FS‑ISAC) to build hunting hypotheses.
• Develop playbooks, KQL/SPL queries and use cases mapped to MITRE ATT&CK, focusing on banking‑specific threats.
• Correlate findings across EDR, network, cloud and identity logs, and hand off confirmed incidents to Incident Response.
• Collaborate with Vulnerability Management, SOC and IT teams to close detection and patching gaps.
• Maintain documentation for internal and regulatory audits (RBI IS Audit, VAPT reviews).

Required profile

• 3–6 years of experience in Threat Intelligence or Threat Hunting, preferably in BFSI or a regulated environment.
• Hands‑on experience with FortiRecon or similar EASM/Digital Risk Protection platforms.
• Strong knowledge of RBI Cyber Security Framework, CERT‑In guidelines and PCI‑DSS (a plus).
• Relevant certifications such as GCTI, GCFA, CEH, CompTIA Security+, Microsoft SC‑200 or equivalent.

Required skills

• FortiRecon (or comparable EASM tool)
• Splunk (SPL) and Microsoft Sentinel (KQL, analytics rules, workbooks)
• MITRE ATT&CK framework
• EDR tools – Microsoft Defender, CrowdStrike, SentinelOne
• Windows and Linux internals, network protocols
• Cloud security – Azure, AWS
• Vulnerability assessment – CVSS scoring, exploitability analysis
• Scripting – Python, PowerShell