Role Summary

We are looking for a Threat Hunter to proactively detect and investigate threats using an NDR platform. You will analyze NetFlow and network traffic, run hypothesis-driven hunts, and carry out network forensics on suspicious activity.

Key Responsibilities

- Conduct proactive threat hunts on the NDR platform, mapped to MITRE ATT&CK;

- Analyze NetFlow, IPFIX, and sFlow data to detect beaconing, lateral movement, data exfiltration, and C2 activity

- Perform deep packet analysis and network forensics using PCAP, Wireshark, and Zeek

- Investigate NDR alerts, validate true positives, and reduce false positives

- Reconstruct attack timelines and prepare forensic and incident reports

- Build and tune detection use cases and traffic baselines

- Integrate NDR findings with the SIEM (ArcSight, Splunk, QRadar,



or similar) and support incident response

- Recommend containment and remediation actions

Required Skills

- Hands-on experience with an NDR platform (Darktrace, Vectra, ExtraHop, Corelight, Cisco Secure Network Analytics, or similar)

- Solid knowledge of NetFlow/IPFIX analysis and network protocols (TCP/IP, DNS, HTTP/S, SMB, etc.)

- Network forensics and packet analysis (Wireshark, tshark, Zeek, Suricata, Arkime)

- Working knowledge of MITRE ATT&CK;, IOCs, and TTPs

- Experience with a SIEM tool; ArcSight is a plus

- Understanding of incident response and DFIR processes

📌 SOC Analyst (Faridabad)
🏢 Innspark Solutions
📍 Faridabad