Threat Hunting & Threat Modeling Analyst (L2)

Summary

The L2 Threat Hunting & Threat Modeling Analyst serves as a critical component of the security operations framework, tasked with conducting both routine and bespoke investigative hunts to proactively identify potential threats. This position leverages automated threat modeling platforms, such as ThreatModeler, to evaluate the security posture of specific applications and projects. The role involves receiving escalated incidents from Level 1 or SOC teams to perform deep-dive forensic analysis, generating comprehensive technical documentation, and collaborating with Level 3 Subject Matter Experts to resolve complex hypotheses and make strategic risk decisions. By bridging the gap between raw intelligence and actionable defense, this analyst ensures that the organization remains resilient against evolving adversary tactics.

Location: Bangalore

Responsibilities

- Advanced Threat Hunting: Execute predefined and ad-hoc threat analysis campaigns, documenting findings with robust evidence and clear conclusions to validate security postures.

- Intelligence-Driven Operations: Integrate external threat intelligence feeds to refine hunt parameters, prioritizing activities based on real-world indicators and stakeholder requirements.

- Automated Threat Modeling: Conduct security assessments on designated applications and projects using automated modeling tools to map trust boundaries, identify attack vectors, and pinpoint control deficiencies.

- Risk Mitigation and Reporting: Systematically document identified risks and propose effective countermeasures, ensuring all assessment artifacts are tracked to resolution through relevant business stakeholders.

- Red Team Collaboration: Facilitate adversary simulation exercises by managing scope definitions,



ensuring adherence to rules of engagement, and maintaining evidence integrity for post-exercise reporting.

- Operational Knowledge Transfer: Translate red team findings into actionable defensive strategies and current hunt hypotheses, while developing standardized playbooks and templates to enhance team consistency.

- Executive Communication: Draft detailed technical reports for analysts and concise executive summaries for leadership, ensuring all outputs are evidence-backed and drive decision-making.

Requirements

- Experience: 5 to 10 years of professional experience in threat hunting, detection engineering, or related security analysis roles.

- Core Competencies: Proven expertise in executing threat hunts, performing threat modeling assessments, and applying proactive detection methodologies.

- Technical Proficiency: Hands-on experience with automated threat modeling platforms (specifically ThreatModeler or equivalent) for application security evaluation.

- Analytical Skills: Ability to investigate suspicious behaviors, understand adversary tactics, and translate them into effective hunt hypotheses and mitigation strategies.

- Reporting Capability: Strong track record of producing high-quality, evidence-based reports that drive operational improvements.

- Focus Area: Deep specialization in threat hunting and modeling; experience is not required for general SOC operations.

Preferred Qualifications

- Familiarity with red team and purple team workflows, including reporting standards and collaboration expectations.

- Working knowledge of exposure management platforms such as Tuskira, including dashboard navigation and posture insight interpretation.

- Relevant certifications in threat hunting, incident response, threat modeling, or application security.

📌 Hiring || Threat Hunting & Threat Modeling AnalystBLR (Bengaluru)
🏢 2COMs
📍 Bengaluru