Job Description :

Do you want to join the world largest brewer? We at AB-InBev have a fantastic opportunity for you to work as a Cyber threat hunter and join a growing team of top professionals who invest time and effort in protecting Ab-InBev from top Sophisticated Threats. We're constantly improving, advancing, and adopting new trends, new skills, and new expertise, giving our employees endless opportunities for professional development.

Key Tasks and Accountabilities :

- Proactively and iteratively hunt on large data sets, isolate, and remediate the threats that are associated with advanced threat actors and the threats that evade automated security solutions both on On-premise and Cloud environments.

- Conduct in-depth analysis of malware behavior, network traffic, endpoint artifacts, and logs.

- Develop and document the detection use case content by correlating the security event telemetry.

- Own and maintain threat hunting roadmap to fill in any detection gaps based on MITRE ATT&CK and ATLAS Framework.

- Work closely with Automation and Orchestration team to transform the detection use cases into security alerts.

- Use case management : Conduct regular review of existing use cases, enhance and optimize the detection logics to produce most effective detections with less or no false positives.

- Develop dashboards and reports to identify potential threats, suspicious/anomalous activity, malware, etc.

- Collaborate with threat intelligence team to identify leads for threat hunting activities.

- Work closely with SIEM admin team and advise on new security log enrolments and help to maintain good log hygiene.

- Present threat briefings and tactical/strategic reports to leadership.

- Serve as an escalation point for SOC Analysts during critical incidents, to perform in depth analysis and triage threat activity based on host and network activity, traffic to identify infection vectors, the extent of the infection, and prepare high quality reports based on findings.

- Work with internal threat intel, offensive and defensive security teams in executing internal operations and mitigate identified risks.

Qualifications and Skills :

- Education : Bachelors degree preferably in Computer Science or Information Systems and/or equivalent formal training or work experience.

- Experience : 5+ years of experience in Cyber threat hunting, Incident response, CISRT and SOC Operations.

- Technical Skills : Deep understanding of attacker TTPs (MITRE ATT&CK, cyber kill chain, APT behaviors), ability to create custom signatures/detection logic, hands-on experience with EDR, SIEM, CDR, Web Proxy, and cloud security tools (AWS Guard duty, MS Defender).

- Preferred Skills : Certifications (GCIH, GCFA, CCTHP), Sentinel One EDR.

- And above all of this, an undying love for beer!

We dream big to create future with more cheers.