• Design and execute hypothesis-driven threat hunting campaigns across cloud infrastructure, applications, and endpoints • Identify anomalous behaviors, TTPs (Tactics, Techniques, and Procedures), and indicators of compromise (IOCs) • Hunt for advanced persistent threats (APTs), insider threats, and supply chain compromises • Develop custom detection logic and hunting queries (KQL, SPL, SQL) for SIEM and EDR platforms • Conduct comprehensive cyber forensic investigations across Linux, Windows, macOS, containers, and cloud environments • Determine root cause, attack vectors, and lateral movement paths