Threat Intelligence & IR Analyst (Contract)

edari; Dubai; On-site; AED 180,000 - 240,000; Part time

Job summary

edari is seeking a Cyber Threat Intelligence & Incident Response Analyst in the United Arab Emirates for a contracted 14‑month engagement. You will research emerging threats, analyze intel, hunt threats, and respond to incidents across a multi-cloud environment.

You will conduct digital forensics, support purple team activities, and communicate findings to strengthen cyber defense for a major client in the region.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related discipline.
• 5–7 years of overall experience with 3–5 years in cybersecurity.
• Experience in SOC operations, threat intelligence, incident response, and forensics.
• Knowledge of cyber attack techniques, threat actors, and Cyber Kill Chain.
• Hands-on with Threat Intelligence Platforms and security monitoring tech.
• Experience with digital forensics tools and large-scale log analysis (Splunk, SQL/KQL, Python).
• Certs like GCIH/GCFA/GCIA/GCDA/CREST or OSCP are advantageous.

Responsibilities

• Research and monitor emerging cyber threats and threat actors.
• Analyse threat intelligence and provide actionable insights.
• Conduct proactive threat hunting across on‑prem and cloud environments.
• Support investigation and response to major incidents.
• Perform digital forensic investigations to identify attack methods and impact.
• Map findings to MITRE ATT&CK and improve detection capabilities.
• Collaborate with teams to strengthen threat detection and response.

Skills

Threat hunting

Digital forensics

MITRE ATT&CK framework

Threat Intelligence Platforms

EDR solutions

Splunk

SQL/KQL

Python

Education

Bachelor's degree in Computer Science

Tools

Splunk

Python

SQL/KQL

Job description

edari is seeking a Cyber Threat Intelligence & Incident Response Analyst in the United Arab Emirates for a contracted 14‑month engagement. You will research emerging threats, analyze intel, hunt threats, and respond to incidents across a multi-cloud environment.

You will conduct digital forensics, support purple team activities, and communicate findings to strengthen cyber defense for a major client in the region.