Senior Threat Hunter

TalentsTide; Emiratos Árabes Unidos; A distancia; AED 260.000 - 420.000; Jornada completa

Descripción de la vacante

TalentsTide in the United Arab Emirates is seeking a Senior Threat Hunter to proactively identify, investigate, and analyse advanced cyber threats within our IT environment. You will focus on identifying hidden threats, attacker TTPs, and improving detection capabilities in a full-time, on-site role.

Responsibilities include hunting threats, analysing IOCs/IOAs, applying MITRE ATT&CK, and collaborating with SOC and Incident Response teams to strengthen monitoring and response.

Formación

• Bachelor's degree in Cybersecurity or related field.
• 3–4 years in Threat Hunting, Threat Intelligence, IR or advanced SOC.
• Strong MITRE ATT&CK knowledge.
• Experience with SIEM platforms (Splunk, Sentinel, QRadar).
• Proficiency with SPL, KQL or similar.
• Knowledge of EDR/XDR, malware analysis, forensics.

Responsabilidades

• Conduct proactive threat hunting to identify threats.
• Analyze IOCs, IOAs, and attacker TTPs.
• Apply MITRE ATT&CK to detect patterns.
• Investigate events with SIEM/EDR/XDR.
• Develop threat detection rules and use cases.
• Translate threat intel into security measures.
• Collaborate with SOC and IR teams to respond to threats.
• Log analysis and endpoint investigations.
• Support digital forensics and incident response activities.
• Prepare technical investigation reports and recommendations.

Conocimientos

Threat Hunting

Threat Intelligence

Incident Response

SOC Operations

Educación

Bachelor's degree in Cybersecurity/Information Security/CS

Herramientas

Splunk

Microsoft Sentinel

QRadar

EDR/XDR

Descripción del empleo

Senior Threat Hunter

Location: UAE
Employment Type: Full-time

Job Purpose

We are looking for an experienced Senior Threat Hunter to proactively identify, investigate, and analyse potential cyber threats within the organization's IT environment. The role will focus on identifying hidden threats, analysing attacker behaviour, improving threat detection capabilities, and supporting incident response activities.

Key Responsibilities

• Conduct proactive threat hunting activities to identify suspicious activities, hidden threats, and potential security breaches.
• Analyse Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and attacker Tactics, Techniques, and Procedures (TTPs).
• Apply the MITRE ATT&CK framework to identify attack patterns and improve threat detection capabilities.
• Investigate security events, anomalies, and potential threats using SIEM, EDR, and XDR platforms.
• Develop and enhance threat detection rules, hunting queries, and use cases.
• Analyse threat intelligence reports and translate findings into actionable security measures.
• Collaborate with SOC and Incident Response teams to investigate and respond to advanced cyber threats.
• Perform log analysis, endpoint investigations, and security event correlation.
• Support digital forensics and incident response activities when required.
• Prepare technical investigation reports and recommend improvements to security monitoring and detection processes.

Requirements

• UAE National with a valid Family Book.
• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or a related field.
• Minimum 3–4 years of relevant experience in Threat Hunting, Threat Intelligence, Incident Response, or advanced SOC operations.
• Strong understanding of the MITRE ATT&CK framework, IOCs, IOAs, and attacker TTPs.
• Hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or similar.
• Experience with threat hunting queries using SPL, KQL, or similar query languages.
• Knowledge of EDR/XDR solutions, malware analysis, digital forensics, and incident investigation.
• Strong analytical, problem-solving, and technical reporting skills.

Preferred Qualifications

• Relevant certifications such as GCIH, GCIA, GCFA, GCFE, CySA+, or equivalent.
• Experience in detection engineering and advanced threat analysis.
• Familiarity with cloud security monitoring and threat intelligence platforms.