Senior Threat Hunting Methodology Specialist

Jobs Garments/Textiles/Buying And Merchandising; United Arab Emirates; À distance; AED 300 000 - 520 000; Plein temps

Avantages offerts par ce poste

Remote work

Competitive compensation

Professional development

Collaboration with international teams

Résumé du poste

Jobs Garments/Textiles/Buying And Merchandising is seeking a Senior Threat Hunting Methodology Specialist to develop and oversee proactive threat hunting frameworks. You will design hypothesis-driven strategies, map activities to MITRE ATT&CK, and analyze telemetry across endpoints, cloud, and identity to strengthen detection and incident response.

The role is fully remote from the UAE, requiring strong expertise in threat intelligence, analytics, and detection engineering.

Qualifications

• Bachelor’s or master's degree in Cybersecurity, Computer Science, IT, Digital Forensics, or related field.
• Significant experience in threat hunting, security operations, or detection engineering.
• Strong understanding of proactive threat hunting methodologies and hypothesis-driven investigation techniques.
• Practical knowledge of the MITRE ATT&CK framework and adversary behavior analysis.
• Experience analyzing endpoint, network, cloud, identity, and authentication telemetry.
• Proficiency with SIEM, EDR, XDR, and threat intelligence platforms.
• Experience developing advanced queries using KQL, SPL, SQL, or comparable technologies.
• Knowledge of scripting and automation using Python, PowerShell, or Bash.
• Ability to correlate complex security events and identify patterns beyond existing rules.
• Excellent technical documentation and stakeholder communication skills.

Responsabilités

• Develop and maintain structured threat hunting methodologies, frameworks, procedures, and operational standards.
• Design hypothesis-driven hunting strategies based on threat intelligence and attack techniques.
• Map hunting activities to MITRE ATT&CK framework and related tactics.
• Analyze telemetry across endpoints, networks, cloud, identity, applications, and authentication.
• Develop advanced hunting queries, analytical rules, and investigative workflows.
• Identify gaps in monitoring and improve detection coverage.
• Evaluate hunting effectiveness with measurable indicators and coverage improvements.
• Establish repeatable hunting processes for persistence, privilege escalation, lateral movement, and data exfiltration.
• Correlate security events across sources to identify complex attack patterns.
• Integrate threat intelligence into hunting strategies and prioritize investigations.
• Collaborate with SOC analysts, IR, detection engineers, and cybersecurity architects.
• Review investigations and translate findings into new detection opportunities.
• Develop documentation for hypotheses, data requirements, queries, findings, and escalation.
• Support continuous improvement of SIEM, EDR, XDR, and security analytics capabilities.
• Conduct retrospective analysis of incidents to identify missed detections.
• Prepare technical reports and management summaries.
• Mentor junior threat hunters and promote best practices.

Connaissances

Threat hunting

Threat intelligence

Security analytics

MITRE ATT&CK

Detection engineering

SIEM

EDR

XDR

KQL

SPL

SQL

Python

PowerShell

Bash

Incident response

Documentation

Remote work management

Formation

Bachelor’s or master’s degree in Cybersecurity, Computer Science, IT, Digital Forensics, or related

Outils

SIEM platforms

EDR platforms

XDR platforms

Description du poste

Job Title: Senior Threat Hunting Methodology Specialist

Location: United Arab Emirates (Remote)

Employment Type: Full-Time

Work Arrangement: 100% Remote — Work From Home

Level: Senior

About the Role

We are seeking a Senior Threat Hunting Methodology Specialist to develop, refine, and oversee proactive cybersecurity threat hunting methodologies that help organizations identify hidden threats, suspicious activities, and advanced adversary behavior. The role focuses on designing structured hunting frameworks, developing analytical hypotheses, evaluating security telemetry, and improving the effectiveness of threat detection capabilities.

The successful candidate will combine expertise in threat intelligence, security analytics, adversary behavior, and detection engineering to strengthen organizational security monitoring and incident response. This position is fully remote and involves authorized analysis of security data within approved environments.

Key Responsibilities

• Develop and maintain structured threat hunting methodologies, frameworks, procedures, and operational standards.
• Design hypothesis-driven hunting strategies based on threat intelligence, emerging attack techniques, and organizational risk exposure.
• Map threat hunting activities to the MITRE ATT&CK framework and relevant adversary tactics, techniques, and procedures.
• Analyze endpoint, network, cloud, identity, application, and authentication telemetry to identify suspicious behavior.
• Develop advanced hunting queries, analytical rules, and investigative workflows using available security platforms.
• Identify gaps in existing security monitoring and recommend improvements to detection coverage.
• Evaluate threat hunting effectiveness through measurable indicators, including detection quality, investigation outcomes, and coverage improvements.
• Establish repeatable hunting processes for identifying persistence, privilege escalation, lateral movement, credential abuse, and data exfiltration.
• Correlate security events across multiple data sources to identify complex attack patterns and potential indicators of compromise.
• Integrate threat intelligence into hunting strategies and prioritize investigations based on relevance and potential impact.
• Collaborate with SOC analysts, incident responders, detection engineers, and cybersecurity architects.
• Review completed investigations and translate findings into new detection opportunities and defensive recommendations.
• Develop standardized documentation for hunting hypotheses, data requirements, queries, findings, and escalation procedures.
• Support continuous improvement of SIEM, EDR, XDR, and security analytics capabilities.
• Conduct retrospective analysis of security incidents to identify missed detection opportunities.
• Prepare technical reports and management summaries covering threat trends, hunting outcomes, and security improvement priorities.
• Mentor junior threat hunters and promote consistent analytical practices across cybersecurity teams.

Qualifications and Experience

• Bachelor's or master's degree in Cybersecurity, Computer Science, Information Technology, Digital Forensics, or a related discipline.
• Significant professional experience in threat hunting, security operations, cyber threat intelligence, incident response, or detection engineering.
• Strong understanding of proactive threat hunting methodologies and hypothesis-driven investigation techniques.
• Practical knowledge of the MITRE ATT&CK framework and adversary behavior analysis.
• Experience analyzing endpoint, network, cloud, identity, and authentication security telemetry.
• Proficiency with SIEM, EDR, XDR, and threat intelligence platforms.
• Experience developing advanced queries using tools or languages such as KQL, SPL, SQL, or comparable technologies.
• Knowledge of scripting and automation using Python, PowerShell, or Bash.
• Understanding of common attack techniques, including credential theft, persistence, lateral movement, command-and-control activity, and data exfiltration.
• Familiarity with threat intelligence frameworks, indicators of compromise, and adversary profiling.
• Ability to correlate complex security events and identify patterns that may not trigger existing detection rules.
• Experience developing detection use cases, analytical playbooks, and security monitoring improvements.
• Strong analytical thinking, investigative judgment, and problem‑solving capabilities.
• Excellent technical documentation, reporting, and stakeholder communication skills.
• Ability to manage multiple investigations independently in a fully remote environment.

What We Offer

• 100% remote working arrangement from within the applicable employment jurisdiction.
• Competitive compensation aligned with experience and cybersecurity expertise.
• Opportunities to contribute to advanced threat detection and cyber resilience initiatives.
• Professional development in threat intelligence, detection engineering, and security analytics.
• Collaboration with international teams across cybersecurity, incident response, and security operations.