MSS Threat Intelligence Lead

CyberGate Defense L.L.C; Abu Dhabi; On-site; AED 120,000 - 180,000; Full time

Job summary

An established industry player is looking for a highly skilled MSS Threat Intelligence Lead to spearhead their threat intelligence and brand monitoring functions. This pivotal role involves developing strategies to protect client environments from emerging cyber threats while coordinating with various teams to ensure alignment with business objectives. The successful candidate will oversee threat intelligence collection and analysis, lead digital brand protection efforts, and enhance operational security workflows. This is a fantastic opportunity to make a significant impact in a dynamic and evolving field, driving proactive intelligence initiatives and contributing to the overall security posture of clients.

Qualifications

• 8+ years in threat intelligence and security operations.
• Strong understanding of threat intelligence lifecycle and frameworks.

Responsibilities

• Lead threat intelligence vision and operational strategy.
• Oversee digital brand protection and threat detection efforts.

Skills

Threat Intelligence

Cyber Security Operations

Brand Monitoring

Threat Analysis

Communication Skills

Analytical Skills

Education

Bachelor's degree in Computer Science

Bachelor's degree in Information Security

Tools

SIEM

SOAR

Dark Web Monitoring Tools

Threat Intelligence Platforms

Job description

We are seeking a highly skilled and experienced MSS Threat Intelligence Lead who will be responsible for leading the threat intelligence and brand monitoring functions within our Managed Security Services (MSS) offering. This role is critical in providing proactive actionable intelligence to protect client environments and digital assets from emerging cyber threats. The individual will coordinate closely with key stakeholders including SOC teams, MSS Engineering, Service Delivery Managers (SDMs), Incident Response, Legal and Compliance teams to ensure that intelligence operations are aligned with client requirements and overall business objectives.

The role also involves overseeing threat intelligence collection, analysis, and dissemination as well as leading efforts in digital brand protection, threat actor tracking, and the integration of threat intelligence into operational security workflows.

Key Responsibilities and Accountabilities:

Threat Intelligence Strategy & Leadership

• Develop and drive the threat intelligence vision, roadmap, and operational strategy across MSS services.
  
• Establish processes for proactive threat hunting, intelligence collection, analysis, and dissemination.
  
• Align threat intelligence practices with industry frameworks such as MITRE ATT&CK, NIST, and ISO 27001.
  

Digital Brand Monitoring & Protection

• Lead efforts to detect, analyze, and respond to digital threats targeting client brands (e.g., domain spoofing, phishing, impersonation, and social media abuse).
  
• Monitor dark web, surface web, and deep web sources for brand-related threats using threat intelligence and DRP platforms.
  
• Coordinate takedowns and legal escalations for fraudulent domains, fake profiles, and leaked sensitive data.
  

Threat Detection & Analysis

• Identify emerging threats, IOCs, and TTPs targeting key industries and clients.
  
• Analyze intelligence from OSINT, commercial feeds, industry ISACs, and proprietary MSS telemetry.
  
• Correlate threat data with internal incidents and SOC use cases to enhance detection capabilities.
  

Intelligence Product Development

• Deliver strategic, operational, and tactical intelligence reports for internal teams and MSS clients.
  
• Create weekly threat landscape updates, actor profiles, sector-specific threat advisories, and executive briefings.
  
• Establish and maintain intelligence dashboards and alerting mechanisms.
  

Tooling, Automation & Integration

• Evaluate and optimize threat intelligence and brand protection platforms.
  
• Work with MSS Engineering to automate threat ingestion, enrichment, and correlation within SIEM and SOAR platforms.
  
• Ensure seamless integration of threat intelligence feeds into detection and response workflows.
  

Risk Management & Governance

• Identify intelligence gaps, process inefficiencies, and operational risks related to threat intelligence and brand monitoring.
  
• Establish governance for threat intel validation, classification, and dissemination policies.
  

Post-Incident Intelligence & Continuous Improvement

• Support incident response teams with threat context, adversary attribution, and post-incident retrospectives.
  
• Incorporate lessons learned from incidents into threat models and operational procedures.
  
• Continuously improve threat intelligence operations based on client feedback, evolving threats, and internal audits.
  

Qualifications:

8 years in threat intelligence, security operations, or digital risk protection with a focus on brand monitoring, threat analysis, and leadership of cyber intelligence functions.
Strong understanding of threat intelligence lifecycle, SIEM, SOAR, dark web monitoring, phishing detection, log analysis, and security frameworks (MITRE ATT&CK, NIST, ISO 27001).

Proven experience managing intelligence-driven initiatives using ITIL, Agile, or PMPaligned methodologies with a track record of cross-functional stakeholder coordination.

Ability to communicate complex threat intelligence concepts clearly to both technical analysts and non-technical executives, including delivering briefings, reports, and threat advisories.

Excellent analytical and investigative skills to identify emerging threats, detect anomalies, and drive proactive mitigation strategies.

Education:

Bachelor's degree in computer science, Information Security, or a related field.