L3 Cyber Threat Hunter

About the role

Kyndryl is seeking an experienced L3 Cyber Threat Hunter to proactively uncover malicious activity that has bypassed traditional security controls. You will work with intelligence‑driven, hypothesis‑based hunting methods to strengthen our customers' cyber resilience.

Key responsibilities

• Transform large‑scale security telemetry and threat intelligence into actionable hunting activities and detection opportunities.
• Collaborate with Threat Intelligence, Detection Engineering, Incident Response, and SOC teams to investigate emerging threats and hidden adversary activity.
• Continuously improve detection coverage across enterprise environments by developing and tuning queries and alerts.

Required profile

• Minimum 5 years of experience in threat hunting, detection engineering, digital forensics, incident response, or penetration testing.
• Strong analytical and problem‑solving skills with a structured, investigative approach.
• Deep understanding of attacker TTPs, intrusion lifecycle, and lateral movement behaviors.

Required skills

• Enterprise log analytics platforms: Microsoft Sentinel, QRadar, Elastic, Splunk, Palo Alto XSIAM.
• Query languages: KQL, SPL, ES|QL, SQL.
• Scripting/automation: Python, PowerShell.
• Familiarity with MITRE ATT&CK framework, EDR/XDR solutions, and SIEM pipelines.