MSS Threat Intelligence Lead

CyberGate Defense L.L.C; Abu Dhabi; On-site; AED 200,000 - 300,000; Full time

Job summary

A leading cybersecurity firm in Abu Dhabi seeks an MSS Threat Intelligence Lead to drive threat intelligence and brand monitoring for its Managed Security Services. The candidate will oversee threat intelligence operations, analyze emerging cyber threats, and coordinate with various stakeholders to enhance client protection. Required qualifications include 8 years in threat intelligence and a bachelor's degree in a related field, showcasing excellent analytical skills and leadership experience.

Qualifications

• 8 years in threat intelligence, security operations or digital risk protection with a focus on brand monitoring.
• Strong understanding of the threat intelligence lifecycle, SIEM, SOAR, and security frameworks.
• Proven experience managing intelligence-driven initiatives using ITIL, Agile or PMPaligned methodologies.

Responsibilities

• Develop and drive the threat intelligence vision and operational strategy.
• Lead efforts to detect, analyze and respond to digital threats targeting client brands.
• Identify emerging threats and analyze intelligence from various sources.

Skills

All-Source Intelligence

Military Intelligence

GIS

ICD Coding

Analysis Skills

Microsoft PowerPoint

Intelligence Analysis

Leadership Experience

Writing Skills

Education

Bachelor’s degree in Computer Science, Information Security or a related field

Job description

We are seeking a highly skilled and experienced MSS Threat Intelligence Lead who will be responsible for leading the threat intelligence and brand monitoring functions within our Managed Security Services (MSS) offering. This role is critical in providing proactive actionable intelligence to protect client environments and digital assets from emerging cyber threats. The individual will coordinate closely with key stakeholders including SOC teams, MSS Engineering Service Delivery Managers (SDMs), Incident Response, Legal and Compliance teams to ensure that intelligence operations are aligned with client requirements and overall business objectives.

The role also involves overseeing threat intelligence collection, analysis and dissemination as well as leading efforts in digital brand protection, threat actor tracking and the integration of threat intelligence into operational security workflows.

Key Responsibilities and Accountabilities

Threat Intelligence Strategy & Leadership

• Develop and drive the threat intelligence vision, roadmap and operational strategy across MSS services.
• Establish processes for proactive threat hunting intelligence collection, analysis and dissemination.
• Align threat intelligence practices with industry frameworks such as MITRE ATT&CK, NIST and ISO 27001.

Digital Brand Monitoring & Protection

• Lead efforts to detect, analyze and respond to digital threats targeting client brands (e.g. domain spoofing, phishing, impersonation and social media abuse).
• Monitor dark web, surface web and deep web sources for brand‑related threats using threat intelligence and DRP platforms.
• Coordinate takedowns and legal escalations for fraudulent domains, fake profiles and leaked sensitive data.

Threat Detection & Analysis

• Identify emerging threats, IOCs and TTPs targeting key industries and clients.
• Analyze intelligence from OSINT, commercial feeds, industry ISACs and proprietary MSS telemetry.
• Correlate threat data with internal incidents and SOC use cases to enhance detection capabilities.

Intelligence Product Development

• Deliver strategic, operational and tactical intelligence reports for internal teams and MSS clients.
• Create weekly threat landscape updates, actor profiles, sector‑specific threat advisories and executive briefings.
• Establish and maintain intelligence dashboards and alerting mechanisms.

Tooling Automation & Integration

• Evaluate and optimize threat intelligence and brand protection platforms.
• Work with MSS Engineering to automate threat ingestion, enrichment and correlation within SIEM and SOAR platforms.
• Ensure seamless integration of threat intelligence feeds into detection and response workflows.

Risk Management & Governance

• Identify intelligence gaps, process inefficiencies and operational risks related to threat intelligence and brand monitoring.
• Establish governance for threat intel validation, classification and dissemination policies.

Post‑Incident Intelligence & Continuous Improvement

• Support incident response teams with threat context, adversary attribution and post‑incident retrospectives.
• Incorporate lessons learned from incidents into threat models and operational procedures.
• Continuously improve threat intelligence operations based on client feedback, evolving threats and internal audits.

Qualifications

8 years in threat intelligence, security operations or digital risk protection with a focus on brand monitoring, threat analysis and leadership of cyber intelligence functions.

Strong understanding of the threat intelligence lifecycle, SIEM, SOAR, dark web monitoring, phishing detection, log analysis and security frameworks (MITRE ATT&CK, NIST, ISO 27001).

Proven experience managing intelligence‑driven initiatives using ITIL, Agile or PMPaligned methodologies with a track record of cross‑functional stakeholder coordination.

Ability to communicate complex threat intelligence concepts clearly to both technical analysts and non‑technical executives, including delivering briefings, reports and threat advisories.

Excellent analytical and investigative skills to identify emerging threats, detect anomalies and drive proactive mitigation strategies.

Bachelor’s degree in Computer Science, Information Security or a related field.

Key Skills

All‑Source Intelligence, Military Intelligence, GIS, ICD Coding, Intelligence Experience, Military Experience, Analysis Skills, Microsoft PowerPoint, Joint Operations, Intelligence Analysis, Leadership Experience, Writing Skills