Senior Exposure Threat Hunter

Qualifications Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent practical experience. Minimum 10+ years of experience in Information Security, preferably within one or more of the following areas: Security Operations Center (SOC) Threat Hunting Security Engineering Detection Engineering Incident Response Strong understanding of security operations processes, methodologies, and investigative workflows. Solid understanding of the cyber-attack lifecycle and common attacker tactics, techniques, and procedures (TTPs). Experience working with enterprise security technologies such as: SIEM platforms EDR/XDR solutions Identity security tools Cloud security platforms Exposure management and attack surface management solutions Knowledge of common attack techniques, including: Initial access Credential abuse Privilege escalation Persistence Lateral movement Defense evasion Data access and exfiltration techniques Experience analyzing security logs, endpoint telemetry, authentication activity, network events, and cloud-native security data. Understanding security detections, alerting mechanisms, and investigative techniques. Familiarity with industry frameworks and methodologies such as: MITRE ATT&CK Cyber Kill Chain Threat Hunting methodologies Risk-based prioritization approaches Strong analytical, troubleshooting, and problem-solving skills. Excellent written and verbal communication skills. Preferred Qualifications Experience working within large-scale enterprise Information Security environments. Experience with exposure management, attack path analysis, identity security, attack surface management, or adversary exposure validation programs. Strong knowledge of SIEM platforms and security event analysis, including the ability to investigate, correlate, and analyze security telemetry from multiple data sources to identify attacker activity, security weaknesses, and emerging threats. Understanding of cloud security concepts across Azure, AWS, or Google Cloud environments. Experience developing, tuning, or maintaining security detections and analytics. Familiarity with threat intelligence and its application within security investigations and threat hunting activities. Experience working with automation or orchestration capabilities within security operations environments. Preferred Certifications GIAC Certified Incident Handler (GCIH) GIAC Certified Forensic Analyst (GCFA) GIAC Cyber Threat Intelligence (GCTI) GIAC Certified Intrusion Analyst (GCIA) Offensive Security Certified Professional (OSCP) More information about NXP in India... #LI-29f4 NXP Semiconductors N.V. (NASDAQ: NXPI) enables a smarter, safer, and more sustainable world through innovation. As the world leader in secure connectivity solutions for embedded applications, NXP is pushing boundaries in the automotive, industrial & Io T, mobile, and communication infrastructure markets. For more information, visit www.nxp.com Bright Minds. Bright Futures. We believe that a key component to growing our business is to develop our people. To enable you to grow your career at NXP, we offer online and offline learning opportunities to help you develop some of your core and professional skills. Commitment At NXP. We recognize NXP is a powerful change agent as we continue to deliver innovative solutions that advance a more sustainable future. We remain steadfast in our commitment to sustainability and making measurable year-on-year progress. Also, we aim to create an inclusive work environment and we will not tolerate racism, discrimination or harassment of any kind. We have programs in place focused on diversity, inclusion and equality. Thank you for considering a career at NXP. To help you prepare for the different steps in our hiring process, see the following useful advice and tips. Are you already an NXP employee? Do not apply here. Instead, you must apply via our internal career page. Thank you for your interest in supporting our recruitment efforts. Please note that NXP operates under a strict Preferred Supplier List (PSL) for all recruitment activities. Any candidate profiles or resume submitted without a prior written agreement or explicit request from our Talent Acquisition team will be considered unsolicited. Such submissions will be deemed free of any obligations, and no fees will be paid by NXP or any of its affiliates, subsidiaries, or divisions - regardless of whether the candidate is hired, either coincidentally or otherwise. Thank you for your understanding.