Posted 04 June, 2026
Senior Specialist
ExlService Holdings, Inc.
Noida, Uttar Pradesh, India
Full Time
Reference: 218_689623_12995
Key Responsibilities
- Proactively hunt for advanced persistent threats (APTs), zero-day exploits, and other sophisticated attacker activity across the enterprise environment.
- Continuously monitor and analyze threat actor activity, tracking their Tactics, Techniques, Procedures (TTPs) and associated Indicators of Compromise (IOCs) using frameworks like MITRE ATT&CK.
- Manage the full intelligence lifecycle by gathering and processing raw data from diverse sources, including internal logs, commercial threat feeds, open-source intelligence (OSINT), and dark web forums.
- Triage, filter, and analyze large datasets to correlate activity, establish context, and produce timely, accurate, and actionable intelligence.
- Disseminate critical intelligence reports, threat briefs, and situational awareness reports to diverse audiences, from technical SOC analysts to CISOs and executive stakeholders.
- Produce and maintain executive-level dashboards that clearly communicate the threat landscape, risk posture, and operational effectiveness.
- Partner with SIEM and SOAR engineering teams to refine and automate threat detection and response workflows, and to review threat briefs, validate hypotheses, and continuously improve detection logic.
- Meticulously document all analytic content, detection logic, core assumptions, and tuning parameters to ensure transparency and maintainability.
Required Skills and Experience
- Bachelor's degree in computer science, Cybersecurity, Information Technology, or a related field.
- 6+ years of experience in cybersecurity, with a demonstrated history as L3 in Cyber Threat Intelligence and/actionable threat hunting.
- Expert-level understanding of threat actor TTPs, APT groups, the cyber kill chain, and the MITRE ATT&CK framework.
- Proven experience in hypothesis-driven threat hunting for advanced adversaries in complex enterprise networks.
- Experience with Threat Intelligence Platforms like Anomali, or MISP.
- Strong data analysis skills with experience processing raw logs (e.g., endpoint, network, proxy) and multiple intelligence feeds (OSINT, commercial, dark web).
- Hands-on experience with SIEM/SOAR platforms (e.g., Sentinel) for detection logic, analysis, and automation.
- Ability to develop and deliver regular, metric-driven reports on threat hunting activities, key findings, and emerging trends.
- Excellent communication skills with the ability to produce high-quality, executive-level reports and brief the leadership.
EXL (NASDAQ: EXLS) is a leading data analytics and digital operations and solutions company. We partner with clients using a data and AI-led approach to reinvent business models, drive better business outcomes and unlock growth with speed. EXL harnesses the power of data, analytics, AI, and deep industry knowledge to transform operations for the world's leading corporations in industries including insurance, healthcare, banking and financial services, media and retail, among others. EXL was founded in 1999 with the core values of innovation, collaboration, excellence, integrity and respect. We are headquartered in New York and have more than 54,000 employees spanning six continents. For more information, visit www.exlservice.com.
Required Skills and Experience
- Bachelor's degree in computer science, Cybersecurity, Information Technology, or a related field.
- 6+ years of experience in cybersecurity, with a demonstrated history as L3 in Cyber Threat Intelligence and/actionable threat hunting.
- Expert-level understanding of threat actor TTPs, APT groups, the cyber kill chain, and the MITRE ATT&CK framework.
- Proven experience in hypothesis-driven threat hunting for advanced adversaries in complex enterprise networks.
- Experience with Threat Intelligence Platforms like Anomali, or MISP.
- Strong data analysis skills with experience processing raw logs (e.g., endpoint, network, proxy) and multiple intelligence feeds (OSINT, commercial, dark web).
- Hands-on experience with SIEM/SOAR platforms (e.g., Sentinel) for detection logic, analysis, and automation.
- Ability to develop and deliver regular, metric-driven reports on threat hunting activities, key findings, and emerging trends.
- Excellent communication skills with the ability to produce high-quality, executive-level reports and brief the leadership.
Key Responsibilities
- Proactively hunt for advanced persistent threats (APTs), zero-day exploits, and other sophisticated attacker activity across the enterprise environment.
- Continuously monitor and analyze threat actor activity, tracking their Tactics, Techniques, Procedures (TTPs) and associated Indicators of Compromise (IOCs) using frameworks like MITRE ATT&CK.
- Manage the full intelligence lifecycle by gathering and processing raw data from diverse sources, including internal logs, commercial threat feeds, open-source intelligence (OSINT), and dark web forums.
- Triage, filter, and analyze large datasets to correlate activity, establish context, and produce timely, accurate, and actionable intelligence.
- Disseminate critical intelligence reports, threat briefs, and situational awareness reports to diverse audiences, from technical SOC analysts to CISOs and executive stakeholders.
- Produce and maintain executive-level dashboards that clearly communicate the threat landscape, risk posture, and operational effectiveness.
- Partner with SIEM and SOAR engineering teams to refine and automate threat detection and response workflows, and to review threat briefs, validate hypotheses, and continuously improve detection logic.
- Meticulously document all analytic content, detection logic, core assumptions, and tuning parameters to ensure transparency and maintainability.
