Senior Threat Hunting Methodology Specialist

Jobs Garments/Textiles/Buying And Merchandising; Abu Dhabi; A distancia; AED 200.000 - 300.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote work

Competitive compensation

Professional development

Collaboration with international teams

Descripción de la vacante

Jobs Garments/Textiles/Buying And Merchandising seeks a Senior Threat Hunting Methodology Specialist to design and oversee proactive hunting methodologies. You will develop hypotheses, evaluate telemetry, and strengthen detection capabilities in a fully remote role based in the UAE.

The ideal candidate has deep threat hunting experience, strong MITRE ATT&CK knowledge, and hands-on capabilities with SIEM/EDR/XDR, cloud and identity telemetry.

Formación

• Bachelor's or master's degree in Cybersecurity, Computer Science, IT, Digital Forensics, or related discipline.
• Significant professional experience in threat hunting, SOC, intelligence, IR, or detection engineering.
• Strong understanding of proactive threat hunting methodologies and hypothesis-driven investigation techniques.
• Practical knowledge of MITRE ATT&CK framework and adversary behavior analysis.
• Experience analyzing endpoint, network, cloud, identity, and authentication telemetry.
• Proficiency with SIEM, EDR, XDR, and threat intel platforms.
• Experience developing advanced queries using KQL, SPL, SQL.
• Scripting and automation using Python, PowerShell, or Bash.
• Knowledge of attack techniques including credential theft, persistence, lateral movement, C2, data exfiltration.
• Ability to correlate complex events and develop detection use cases.

Responsabilidades

• Develop and maintain structured threat hunting methodologies, frameworks, procedures, and standards.
• Design hypothesis-driven hunting strategies based on threat intel and risk exposure.
• Map hunting activities to MITRE ATT&CK and related tactics/techniques.
• Analyze telemetry across endpoints, networks, cloud, identity, and applications.
• Develop advanced hunting queries, rules, and investigative workflows.
• Identify gaps in monitoring and improve detection coverage.
• Evaluate hunting effectiveness with measurable indicators and outcomes.
• Establish repeatable hunting processes for persistence, escalation, lateral movement,盗 credential abuse, exfiltration.
• Correlate security events across data sources to identify complex patterns.
• Integrate threat intel into hunting strategies and prioritize investigations.
• Collaborate with SOC, IR, detection engineers, and cybersecurity architects.
• Translate investigations into new detections and defensive recommendations.
• Document hunting hypotheses, data needs, and escalation procedures.
• Support SIEM, EDR, XDR, and security analytics improvements.

Conocimientos

MITRE ATT&CK mapping

Threat hunting

Analytics

Documentation

Scripting

Python

PowerShell

Bash

SQL

Educación

Bachelor's or master's degree in Cybersecurity, Computer Science, IT, Digital Forensics, or related discipline

Herramientas

SIEM

EDR

XDR

Threat intelligence platforms

KQL

SPL

SQL

Python

PowerShell

Bash

Descripción del empleo

Job Title: Senior Threat Hunting Methodology Specialist

Location: United Arab Emirates (Remote)

Employment Type: Full-Time

Work Arrangement: 100% Remote — Work From Home

Level: Senior

About the Role

We are seeking a Senior Threat Hunting Methodology Specialist to develop, refine, and oversee proactive cybersecurity threat hunting methodologies that help organizations identify hidden threats, suspicious activities, and advanced adversary behavior. The role focuses on designing structured hunting frameworks, developing analytical hypotheses, evaluating security telemetry, and improving the effectiveness of threat detection capabilities.

The successful candidate will combine expertise in threat intelligence, security analytics, adversary behavior, and detection engineering to strengthen organizational security monitoring and incident response. This position is fully remote and involves authorized analysis of security data within approved environments.

Key Responsibilities

• Develop and maintain structured threat hunting methodologies, frameworks, procedures, and operational standards.
• Design hypothesis-driven hunting strategies based on threat intelligence, emerging attack techniques, and organizational risk exposure.
• Map threat hunting activities to the MITRE ATT&CK framework and relevant adversary tactics, techniques, and procedures.
• Analyze endpoint, network, cloud, identity, application, and authentication telemetry to identify suspicious behavior.
• Develop advanced hunting queries, analytical rules, and investigative workflows using available security platforms.
• Identify gaps in existing security monitoring and recommend improvements to detection coverage.
• Evaluate threat hunting effectiveness through measurable indicators, including detection quality, investigation outcomes, and coverage improvements.
• Establish repeatable hunting processes for identifying persistence, privilege escalation, lateral movement, credential abuse, and data exfiltration.
• Correlate security events across multiple data sources to identify complex attack patterns and potential indicators of compromise.
• Integrate threat intelligence into hunting strategies and prioritize investigations based on relevance and potential impact.
• Collaborate with SOC analysts, incident responders, detection engineers, and cybersecurity architects.
• Review completed investigations and translate findings into new detection opportunities and defensive recommendations.
• Develop standardized documentation for hunting hypotheses, data requirements, queries, findings, and escalation procedures.
• Support continuous improvement of SIEM, EDR, XDR, and security analytics capabilities.
• Conduct retrospective analysis of security incidents to identify missed detection opportunities.
• Prepare technical reports and management summaries covering threat trends, hunting outcomes, and security improvement priorities.
• Mentor junior threat hunters and promote consistent analytical practices across cybersecurity teams.

Qualifications and Experience

• Bachelor's or master's degree in Cybersecurity, Computer Science, Information Technology, Digital Forensics, or a related discipline.
• Significant professional experience in threat hunting, security operations, cyber threat intelligence, incident response, or detection engineering.
• Strong understanding of proactive threat hunting methodologies and hypothesis-driven investigation techniques.
• Practical knowledge of the MITRE ATT&CK framework and adversary behavior analysis.
• Experience analyzing endpoint, network, cloud, identity, and authentication security telemetry.
• Proficiency with SIEM, EDR, XDR, and threat intelligence platforms.
• Experience developing advanced queries using tools or languages such as KQL, SPL, SQL, or comparable technologies.
• Knowledge of scripting and automation using Python, PowerShell, or Bash.
• Understanding of common attack techniques, including credential theft, persistence, lateral movement, command-and-control activity, and data exfiltration.
• Familiarity with threat intelligence frameworks, indicators of compromise, and adversary profiling.
• Ability to correlate complex security events and identify patterns that may not trigger existing detection rules.
• Experience developing detection use cases, analytical playbooks, and security monitoring improvements.
• Strong analytical thinking, investigative judgment, and problem-solving capabilities.
• Excellent technical documentation, reporting, and stakeholder communication skills.
• Ability to manage multiple investigations independently in a fully remote environment.

What We Offer

• 100% remote working arrangement from within the applicable employment jurisdiction.
• Competitive compensation aligned with experience and cybersecurity expertise.
• Opportunities to contribute to advanced threat detection and cyber resilience initiatives.
• Professional development in threat intelligence, detection engineering, and security analytics.
• Collaboration with international teams across cybersecurity, incident response, and security operations.