Cyber Threat Intelligence Analyst - Temporary role

Transguard Workforce Solutions; Dubai; On-site; AED 150,000 - 270,000; Full time

Job summary

Transguard Workforce Solutions in the UAE is seeking a skilled Cyber Threat Intelligence Analyst - Threat Hunting to support the Digital Defence Center in Dubai. You will research threats, conduct hunts across on-prem and cloud environments, and contribute to incident response and forensics during breaches.

The role requires 3+ years in Digital Forensics, Incident Response, Threat Intelligence and security operations, with hands-on experience with platforms like Recorded Future, Flashpoint,

Qualifications

• 3+ years in Digital Forensics, Incident Response, Threat Hunting, Security Operations or related fields.
• Experience handling large data sets with SQL/KQL, Python, Splunk or equivalent.
• Proficient with Threat Intelligence Platforms (TTPs, IOC generation, OSINT collection).
• Understanding of ATT&CK framework and mapping attacker techniques to breaches.

Responsibilities

• Conduct threat hunting missions in on-prem and cloud environments.
• Perform incident response and forensics during active breaches.
• Research and report on emerging threats to shape defensive strategy.
• Demonstrate measurable security posture improvements through reporting.

Skills

Threat Hunting

Cyber Incident Response

Threat Intelligence

Red Teaming

Penetration Testing

OSINT

Forensics

Security Operations

Data Analytics

Education

GCIA certification

Tools

Recorded Future

Flashpoint

Blueliv

Anomali

ThreatIQ

Metasploit

Job description

Transguard Workforce Solutions is the UAE’s leading provider of unique and innovative HR solutions. With a decade of experience in the region and a team that possesses extensive knowledge of the market, we provide a fully integrated HR solution.

We are currently recruiting for an Cyber Threat Intelligence Analyst - Threat Hunting for our client to be based out of their Dubai office.

Job Purpose:

The Analyst – Cyber Threat Intelligence will support the Digital Defence Center (DDC) in researching and reporting on emerging threats against the Organization and to strategically shape and guide the approach the taken to protect its people and assets. The analyst will be responsible for responding and analyzing major cyber security incidents, conducting forensic investigations across a complex multi-cloud environment, supporting threat hunting cycles, and purple team engagements.

Key Accountabilities:

• Threat Hunting : Conducts hunt missions on Business Environment (on-prem, cloud) with the use of Digital Forensics tools & techniques and Custom tools and scripts .
• Offensive Assessments : Conducts offensive on Business Environment (on-prem, cloud) using security including tools such as Metasploit, exploit development, Open Source Intelligence Gathering (OSINT), and designing ways to breach enterprise networks .
• Breach Analysis : Analyzes attacker techniques at all stages of a breach with the capability of mapping to ATT&CK framework.
• Forensics : Performs incident response and forensics of active breaches.
• Reporting : Reports measurable improvement of overall security posture.

Requirements:

• Core Activities Experience of 3+ years of experience in a technical role with Digital Forensics and Incident Response background in the areas of Security Operations, Threat Hunting , Threat Intelligence, Cyber Incident Response, Penetration Testing and Red Teaming.

Skills, Tools, and Systems Experience:

• Experience using Cyber Kill Chain
• Expertise on in using Threat Intelligence Platforms (Recorded Future, Flashpoint, Blueliv, Anomali, ThreatIQ etc.)
• Demonstrable experience in the use of Digital Forensics tools, techniques and concepts including creating and using Custom tools and scripts
• Demonstrable experience of analyzing and interpreting system, security, and application logs Experience with offensive security including tools such as Metasploit, exploit development, Open Source Intelligence Gathering (OSINT), and designing ways to breach enterprise networks Advanced knowledge of operating system internals and security mechanisms.
• Experience analyzing attacker techniques at all stages of a breach.
• Experience in forensics, threat intelligence, incident response
• Skilled working with extremely large data sets, using tools and scripting languages such as: SQL/KQL, Python, Splunk, etc.
• Working knowledge of EDR solutions

Professional/Regulatory/Certification Requirements:

• Expertise on in using Threat Intelligence Platforms (Recorded Future, Flashpoint, Blueliv, Anomali, ThreatIQ etc.)
• Holding any of the following certifications (or working toward / or similar) would be preferred: GIAC Certified Intrusion Analyst (GCIA)