Cyber Security Operations Lead – Threat Hunting

TAQA Group; Abu Dhabi; On-site; AED 350,000 - 650,000; Full time

Job summary

TAQA Group is seeking a Lead, Cyber Security Operations to oversee advanced threat detection, response, and security architecture maintenance across IT and OT. You will drive threat hunting, incident response, and continuous protection for TAQA's critical assets in the UAE region.

The role requires 8+ years in an SOC, strong SIEM capabilities, and collaboration with cross-functional teams to strengthen defenses and regulatory compliance. An emphasis on proactive protection and remediation is key.

Qualifications

• 8+ years in a cybersecurity operations center role.
• Proven experience with threat monitoring, incident response and threat hunting.
• Strong analytical and collaboration skills across teams.

Responsibilities

• Lead threat monitoring programs and develop SIEM use cases.
• Monitor and respond to cybersecurity threats across IT/OT domains.
• Analyze logs and network data to identify anomalies and trends.
• Assess network/system integrity and escalate incidents to IR teams.
• Collaborate with stakeholders to investigate incidents and recommend remediations.
• Conduct risk analysis, simulate attacks, and perform ethical hacking as needed.
• Document incident reports and maintain regulatory compliance.
• Coordinate with MSSP/MDR providers and validate incidents.
• Support for forensic investigations and internal ethics investigations.

Skills

Threat hunting

Incident response

Security operations leadership

Analytical thinking

Education

Master's Degree in Engineering/ CS/ IT

Tools

Splunk Power User Certification

Job description

TAQA Group is seeking a Lead, Cyber Security Operations to oversee advanced threat detection, response, and security architecture maintenance across IT and OT. You will drive threat hunting, incident response, and continuous protection for TAQA's critical assets in the UAE region.

The role requires 8+ years in an SOC, strong SIEM capabilities, and collaboration with cross-functional teams to strengthen defenses and regulatory compliance. An emphasis on proactive protection and remediation is key.