Cybersecurity- CTI SME

Kyndryl is hiring a Cybersecurity- CTI SME in Noida, Uttar Pradesh, India. The details below summarise the employer's own listing; applications happen on the original posting, not on GetFirstJob.

What the work involves

• Job Title: Cybersecurity- CTI SME
• Location: Noida, Greater Noida
• Shift: 5 days WFO (Rotational)
• Monitoring threat actor activity, TTPs (Tactics, Techniques, and Procedures), and Indicators of Compromise (IOCs)
• Working with SOC engineers, architects, and incident responders
• Documenting content logic, assumptions, and tuning parameters
• Participating in governance and change management processes
• Hunting for advanced persistent threats (APTs) and zero-day exploits
• Leveraging threat feeds from open, commercial, and dark web sources
• Gathering raw data from internal logs, external feeds, and social media

What they are looking for

• Required Skills and Experience
• Having 7+ years of experience in CTI SME
• Candidate must have experience with MITRE Attack framework and should be able to explain the TTP analysis
• Hands-on experience with threat actor attribution, TTP analysis, and mapping adversary behavior to MITRE ATT&CK
• Preferred Skills and Experience
• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or other related fields
• Experience with workload, server, network architectures and associated security controls
• Proven experience tracking and analyzing APT groups, cybercrime actors, and emerging threat campaigns using intelligence-driven methodologies

Pay and dates

The listing does not state pay. The source page shows a relative posting age rather than an exact posting date; this role was first seen and checked as open on 4 November 2026. The source page showed it as posted “4 weeks ago” when captured; that is a relative stamp, not an exact date.

How to apply

Apply on the listing where the employer published this role: Cybersecurity- CTI SME at Kyndryl. We found this listing via linkedin.com; it was still open when we checked on 4 November 2026. If the posting has closed or the link fails, the role may have been filled.