Threat Hunter & Detection Specialist

Confidential; Abu Dhabi Emirate; On-site; AED 260,000 - 420,000; Full time

Job summary

Confidential in United Arab Emirates is seeking a skilled Threat Hunter to proactively identify and contain advanced threats across digital and IT environments. You will analyze system telemetry, endpoints, logs, and threat intel to drive detections and incident response.

The role requires hands-on experience with SIEM/EDR, solid knowledge of MITRE ATT&CK, and collaboration with SOC, IR, and security teams to strengthen defenses and reduce dwell time.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
• Relevant cybersecurity certifications preferred (e.g., GCFA, GCTI, GCIH, GCIA).

Responsibilities

• Conduct proactive threat-hunting investigations using endpoint, network, and security logs to identify indicators of compromise.
• Apply behavioral analytics, MITRE ATT&CK, TTP correlation, and anomaly detection to identify suspicious activity.
• Use threat intelligence to develop and validate hunting hypotheses.
• Collaborate with SOC, Incident Response, Threat Intelligence, Cloud, Infrastructure, and Security Architecture teams to investigate and contain threats.
• Validate and tune detection rules to reduce false positives.
• Identify gaps in security controls and recommend improvements to enhance detection and prevention.
• Document hunting activities, findings, indicators, and remediation recommendations in structured reports.
• Contribute to threat-hunting playbooks and methodologies.
• Continuously develop technical expertise in threat hunting and advanced detection techniques.

Skills

SIEM

EDR/XDR

Network monitoring

Threat intelligence

Security analytics

MITRE ATT&CK

Adversary TTPs

Incident investigation

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology

Tools

Job description

Confidential in United Arab Emirates is seeking a skilled Threat Hunter to proactively identify and contain advanced threats across digital and IT environments. You will analyze system telemetry, endpoints, logs, and threat intel to drive detections and incident response.

The role requires hands-on experience with SIEM/EDR, solid knowledge of MITRE ATT&CK, and collaboration with SOC, IR, and security teams to strengthen defenses and reduce dwell time.