Senior Threat Hunter (Emirati) - Up to 32,000 AED

Edison Smart®; United Arab Emirates; On-site; AED 240,000 - 420,000; Full time

Job summary

Edison Smart is recruiting a Senior Threat Hunter for a confidential UAE-based cybersecurity partner. You will lead proactive investigations, detect advanced threats, and transform findings into stronger detections.

You will mentor analysts and collaborate with SOC, IR, and engineering to close detection gaps. You will analyze telemetry, perform malware and memory forensics, and develop hunting queries and monitoring use cases using EDR/XDR and SIEM tools.

Qualifications

• Three+ years in threat hunting or related SOC roles.
• Experience with EDR/XDR platforms and SIEM tools.
• Strong knowledge of MITRE ATT&CK and attacker TTPs.
• Proficiency with hunting queries using KQL, SPL, SQL and regex.
• Experience in malware analysis and digital forensics.
• Familiarity with network protocols and Windows/Linux/AD/Azure.
• Bachelor’s or Master’s in Information Security or related field.
• Security certifications would be advantageous.

Responsibilities

• Develop and execute hypothesis-driven threat hunts across endpoints, networks, cloud platforms and enterprise applications.
• Analyse security telemetry, EDR/XDR data, network traffic and endpoint artefacts to uncover hidden threats.
• Investigate indicators of compromise, indicators of attack and suspicious behaviour that may not trigger alerts.
• Use threat intelligence and MITRE ATT&CK to identify adversary tactics, techniques and procedures.
• Develop hunting queries, detection logic, SIEM correlation rules and new monitoring use cases.
• Support malware analysis, digital forensic investigations and root-cause analysis during complex incidents.
• Collaborate with SOC, incident response, vulnerability management and engineering teams to close detection gaps.
• Produce clear investigation reports, executive summaries and remediation recommendations.
• Mentor analysts and help develop the team’s threat hunting capabilities.

Skills

Threat hunting

Incident response

Digital forensics

MITRE ATT&CK

KQL

SPL

SQL

EDR/XDR

Splunk

Windows

Linux

Education

Bachelor’s or Master’s degree in Information Security or related field

Tools

Microsoft Defender

Cortex XDR

Splunk

Wireshark

Zeek

Velociraptor

Volatility

Ghidra

FlareVM

ELK

Job description

Senior Threat Hunter - UAENationals Only

Applicants MUST be Emirati. This is a mandatory requirement for this position.

Edison Smart is recruiting a Senior Threat Hunter on behalf of a confidential cybersecurity organisation.

You will lead proactive investigations into advanced threats, uncover malicious activity that evades existing controls and turn hunting findings into stronger detection capabilities.

Key responsibilities

• Develop and execute hypothesis-driven threat hunts across endpoints, networks, cloud platforms and enterprise applications.


• Analyse security telemetry, EDR/XDR data, network traffic and endpoint artefacts to uncover hidden threats.


• Investigate indicators of compromise, indicators of attack and suspicious behaviour that may not trigger alerts.


• Use threat intelligence and MITRE ATT&CK to identify adversary tactics, techniques and procedures.


• Develop hunting queries, detection logic, SIEM correlation rules and new monitoring use cases.


• Support malware analysis, digital forensic investigations and root-cause analysis during complex incidents.


• Collaborate with SOC, incident response, vulnerability management and engineering teams to close detection gaps.


• Produce clear investigation reports, executive summaries and remediation recommendations.


• Mentor analysts and help develop the team’s threat hunting capabilities.

Required experience

• At least three years in threat hunting, incident response, DFIR or advanced SOC operations.


• Hands-on experience with EDR/XDR platforms such as Microsoft Defender or Cortex XDR, alongside SIEM tools such as Splunk.


• Strong knowledge of MITRE ATT&CK, attack chains and adversary behaviour.


• Proficiency in hunting queries using KQL, SPL, SQL and regular expressions.


• Experience in malware analysis, memory analysis, digital forensics and endpoint investigations.


• Familiarity with tools such as Wireshark, Zeek, Velociraptor, Volatility, Ghidra, FlareVM or ELK.


• Strong understanding of Windows, Linux, Active Directory, Azure, Microsoft 365 and network protocols.


• Bachelor’s or master’s degree in Information Security, Computer Science, Electrical Engineering or a related field.


• Relevant security certifications would be advantageous.