Senior Threat Hunter

Location: UAE
Employment Type: Full-time

Job Purpose

We are looking for an experienced Senior Threat Hunter to proactively identify, investigate, and analyse potential cyber threats within the organization's IT environment. The role will focus on identifying hidden threats, analysing attacker behaviour, improving threat detection capabilities, and supporting incident response activities.

Key Responsibilities

• Conduct proactive threat hunting activities to identify suspicious activities, hidden threats, and potential security breaches.
• Analyse Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and attacker Tactics, Techniques, and Procedures (TTPs).
• Apply the MITRE ATT&CK framework to identify attack patterns and improve threat detection capabilities.
• Investigate security events, anomalies, and potential threats using SIEM, EDR, and XDR platforms.
• Develop and enhance threat detection rules, hunting queries, and use cases.
• Analyse threat intelligence reports and translate findings into actionable security measures.
• Collaborate with SOC and Incident Response teams to investigate and respond to advanced cyber threats.
• Perform log analysis, endpoint investigations, and security event correlation.
• Support digital forensics and incident response activities when required.
• Prepare technical investigation reports and recommend improvements to security monitoring and detection processes.

Requirements

• UAE National with a valid Family Book.
• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or a related field.
• Minimum 3–4 years of relevant experience in Threat Hunting, Threat Intelligence, Incident Response, or advanced SOC operations.
• Strong understanding of the MITRE ATT&CK framework, IOCs, IOAs, and attacker TTPs.
• Hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or similar.
• Experience with threat hunting queries using SPL, KQL, or similar query languages.
• Knowledge of EDR/XDR solutions, malware analysis, digital forensics, and incident investigation.
• Strong analytical, problem-solving, and technical reporting skills.

Preferred Qualifications

• Relevant certifications such as GCIH, GCIA, GCFA, GCFE, CySA+, or equivalent.
• Experience in detection engineering and advanced threat analysis.
• Familiarity with cloud security monitoring and threat intelligence platforms.