Cyber Threat Intelligence & Incident Response Analyst

edari; Dubai; On-site; AED 180,000 - 240,000; Part time

Job summary

edari is seeking a Cyber Threat Intelligence & Incident Response Analyst in the United Arab Emirates for a contracted 14‑month engagement. You will research emerging threats, analyze intel, hunt threats, and respond to incidents across a multi-cloud environment.

You will conduct digital forensics, support purple team activities, and communicate findings to strengthen cyber defense for a major client in the region.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related discipline.
• 5–7 years of overall experience with 3–5 years in cybersecurity.
• Experience in SOC operations, threat intelligence, incident response, and forensics.
• Knowledge of cyber attack techniques, threat actors, and Cyber Kill Chain.
• Hands-on with Threat Intelligence Platforms and security monitoring tech.
• Experience with digital forensics tools and large-scale log analysis (Splunk, SQL/KQL, Python).
• Certs like GCIH/GCFA/GCIA/GCDA/CREST or OSCP are advantageous.

Responsibilities

• Research and monitor emerging cyber threats and threat actors.
• Analyse threat intelligence and provide actionable insights.
• Conduct proactive threat hunting across on‑prem and cloud environments.
• Support investigation and response to major incidents.
• Perform digital forensic investigations to identify attack methods and impact.
• Map findings to MITRE ATT&CK and improve detection capabilities.
• Collaborate with teams to strengthen threat detection and response.

Skills

Threat hunting

Digital forensics

MITRE ATT&CK framework

Threat Intelligence Platforms

EDR solutions

Splunk

SQL/KQL

Python

Education

Bachelor's degree in Computer Science

Tools

Splunk

Python

SQL/KQL

Job description

We are looking to hire a Cyber Threat Intelligence & Incident Response Analyst, who will be responsible for researching emerging threats, assess their potential impact, and translate threat intelligence into actionable insights that strengthen cyber defense capabilities. The role also involves investigating and responding to cybersecurity incidents, conducting digital forensic investigations, proactively hunting for threats, and supporting purple team activities across a complex multi-cloud environment for our client, one of the largest semi-government organizations in the region.

This position is a contract role with an initial duration of 14 months and is renewable. The role sits within the Technology Design & Infrastructure and works closely with business stakeholders, and IT teams.

We are looking for a passionate Cyber Threat Intelligence & Incident Response Analyst, who will play a key role in investigating and responding to cybersecurity incidents, conducting digital forensic investigations, proactively hunting for threats, and supporting purple team activities across a complex multi-cloud environment.

Key Responsibilities;

• Research and monitor emerging cyber threats, threat actors, vulnerabilities, and attack techniques relevant to the organisation.
• Analyse threat intelligence and provide actionable insights to support security decision-making.
• Conduct proactive threat hunting across on-premises and cloud environments to identify potential threats and suspicious activity.
• Support the investigation and response to major cybersecurity incidents.
• Conduct digital forensic investigations to identify attack methods, scope, impact, and potential root causes.
• Analyse attacker behaviour and techniques across different stages of a cyber attack and map findings to the MITRE ATT&CK framework.
• Support offensive security assessments, red team and purple team activities to identify weaknesses and improve detection and response capabilities.
• Analyse security, system, application, and endpoint logs to identify indicators of compromise and suspicious activity.
• Develop and use scripts, tools, and analytical techniques to support threat hunting, investigations, and forensic activities.
• Work with Threat Intelligence Platforms, EDR solutions, SIEM platforms, and other cybersecurity technologies.
• Produce clear and actionable reports on threats, incidents, investigations, and opportunities to improve the overall security posture.
• Collaborate with cybersecurity, technology, and other business teams to strengthen threat detection, prevention, and response capabilities.

Required Experience & Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related discipline.
• 5–7 years of overall experience, with 3–5 years of relevant cybersecurity experience.
• Experience in cybersecurity, SOC operations, threat intelligence, threat hunting, incident response, digital forensics, penetration testing, or red teaming.
• Strong understanding of cyber attack techniques, threat actor behaviour, and the Cyber Kill Chain.
• Hands-on experience with Threat Intelligence Platforms and security monitoring technologies.
• Experience with digital forensics tools and techniques.
• Experience analysing large volumes of security data and logs using tools such as Splunk, SQL/KQL, and Python.
• Relevant industry certifications such as GCIH, GCFA, GCIA, GCDA, CREST Threat Intelligence Analyst, CREST Intrusion Analyst, or OSCP would be advantageous
• Working knowledge of EDR solutions and cloud security environments.
• Strong analytical, investigative, problem-solving, and communication skills.

Availability:

• Preference will be given to candidates available immediately after accepting the offer.

We are looking for a candidate who will be able to work in the United Arab Emirates.