Role Summary

We are looking for a Threat Hunter to proactively detect and investigate threats using an NDR platform. You will analyze NetFlow and network traffic, run hypothesis-driven hunts, and carry out network forensics on suspicious activity.

Key Responsibilities

- Conduct proactive threat hunts on the NDR platform, mapped to MITRE ATT&CK;
- Analyze NetFlow, IPFIX, and sFlow data to detect beaconing, lateral movement, data exfiltration, and C2 activity
- Perform deep packet analysis and network forensics using PCAP, Wireshark, and Zeek
- Investigate NDR alerts, validate true positives, and reduce false positives
- Reconstruct attack timelines and prepare forensic and incident reports
- Build and tune detection use cases and traffic baselines
- Integrate NDR findings with the SIEM (ArcSight, Splunk, QRadar,



or similar) and support incident response
- Recommend containment and remediation actions

Required Skills
- Hands-on experience with an NDR platform (Darktrace, Vectra, ExtraHop, Corelight, Cisco Secure Network Analytics, or similar)
- Solid knowledge of NetFlow/IPFIX analysis and network protocols (TCP/IP, DNS, HTTP/S, SMB, etc.)
- Network forensics and packet analysis (Wireshark, tshark, Zeek, Suricata, Arkime)
- Working knowledge of MITRE ATT&CK;, IOCs, and TTPs
- Experience with a SIEM tool; ArcSight is a plus
- Understanding of incident response and DFIR processes

📌 SOC Analyst (New Delhi)
🏢 Innspark Solutions
📍 New Delhi