Threat Intelligence Manager - Cyber Defense Operations

DiceTek UAE; Abu Dhabi; Presencial; AED 120.000 - 190.000; Jornada completa

Descripción de la vacante

Dicetek LLC in Abu Dhabi, United Arab Emirates, seeks a Threat Intelligence Manager to lead cyber threat intelligence within a banking security environment. You will oversee collection, analysis and reporting of threats, driving proactive strategies and actionable insights for security leadership.

The role requires hands-on malware analysis, reverse engineering and digital forensics expertise, with close collaboration to SOC teams and internal stakeholders.

Formación

• 10 years of professional experience in cyber threat intelligence and threat analysis.
• Bachelor's or master's degree in Engineering, Information Technology or a related technical discipline.
• Hands-on expertise in malware analysis, reverse engineering and digital forensic investigations.

Responsabilidades

• Lead the cyber threat intelligence function within the banking security environment.
• Oversee collection, analysis and reporting of cyber threats.
• Develop proactive threat intelligence strategies to protect banking information assets.
• Collaborate with SOC teams to improve threat detection and response.
• Prepare intelligence reports for security leadership and decision-makers.
• Ensure compliance with applicable cybersecurity standards and regulatory requirements.

Conocimientos

Threat intelligence

Threat analysis

Leadership

Stakeholder communication

OSINT

MITRE ATT&CK

Educación

Bachelor's or Master's in Engineering/IT

Herramientas

EnCase

Threat Intelligence Platforms (TIPs)

Forensic tools

Descripción del empleo

Threat Intelligence Manager - Cyber Defense Operations

Job Snapshot: Threat Intelligence Manager - Location: Abu Dhabi, United Arab Emirates - Industry: IT and Services - Function: Computer-Network Security - Experience: 10 years - Job Type: Full Time - Work Arrangement: On-site

Position Overview

Dicetek LLC is seeking an experienced Threat Intelligence Manager for a full-time, on-site position in Abu Dhabi, United Arab Emirates. The role focuses on leading cyber threat intelligence activities within a banking security environment, identifying emerging threats and delivering actionable intelligence to strengthen cyber defense capabilities. Reporting to the Head of Information Security Cyber Defense Operations, the Threat Intelligence Manager will oversee the identification, collection, analysis and reporting of cyber threats that could affect the bank 's information assets, operations and reputation. The successful candidate will combine strategic threat intelligence leadership with hands‑on technical expertise in malware analysis, reverse engineering, digital forensics and threat intelligence platforms. The position requires close collaboration with Security Operations Center (SOC) teams, internal stakeholders and external intelligence communities to improve threat detection, analysis and response readiness. Candidates should have at least 10 years of experience in cyber threat intelligence and threat analysis, preferably within large financial institutions.

Job Details

Country: United Arab Emirates - City: Abu Dhabi - Industry: IT and Services - Function: Computer-Network Security - Salary: Not disclosed - Gender: No Preference - Candidate Nationality: Not specified - Job Type: Full Time - Work Arrangement: On-site

Key Responsibilities

Cyber Threat Intelligence Leadership

• Lead and manage the cyber threat intelligence function within the banking security environment.
• Oversee the identification, collection, analysis and reporting of existing and emerging cyber threats.
• Develop proactive threat intelligence strategies to support the protection of banking information assets and operations.
• Monitor the evolving cyber threat landscape and assess threats relevant to the financial services sector.
• Provide strategic direction for threat intelligence activities and analytical priorities.
• Deliver actionable intelligence and risk insights to security leadership and key decision-makers.
• Continuously improve threat intelligence processes, analytical capabilities and reporting effectiveness.

Threat Intelligence Collection and Analysis

• Collect and analyse intelligence from open-source intelligence (OSINT), commercial threat feeds and relevant intelligence communities.
• Evaluate cyber threat information to identify potential risks, attack patterns and emerging adversary techniques.
• Apply established threat analysis frameworks to investigate malicious activity and understand attacker behaviour.
• Use MITRE ATT&CK, Cyber Kill Chain and the Diamond Model of Intrusion Analysis to structure threat assessments.
• Correlate intelligence from multiple sources to develop meaningful threat assessments.
• Prepare intelligence reports that support proactive cyber defense and security decision-making.

Malware Analysis and Digital Forensics

• Conduct and support technical investigations involving malware analysis and reverse engineering.
• Analyse malicious files, suspicious activity and digital artifacts to understand cyber threats.
• Perform digital forensic investigations using appropriate forensic methodologies and tools.
• Collect, preserve and analyse digital evidence in accordance with applicable legal and regulatory requirements.
• Use forensic investigation tools such as EnCase to support evidence examination and technical analysis.
• Document investigation findings and maintain appropriate evidence handling procedures.
• Translate technical investigation results into actionable threat intelligence.

Threat Intelligence Platform and SOC Integration

• Manage and support the effective use of Threat Intelligence Platforms (TIPs).
• Integrate threat intelligence capabilities with Security Operations Center environments.
• Collaborate with SOC teams to improve threat detection, investigation and analysis.
• Support the use of threat intelligence to identify indicators of compromise, malicious techniques and relevant attack patterns.
• Enhance intelligence sharing and coordination between cyber threat intelligence and operational security teams.
• Identify opportunities to improve intelligence-driven security monitoring and detection capabilities.

Threat Reporting and Strategic Advisory

• Prepare comprehensive cyber threat intelligence assessments and reports.
• Communicate emerging threats, technical findings and potential business impacts to relevant stakeholders.
• Provide actionable intelligence to support security leadership and informed decision-making.
• Present complex cyber threat information in a clear and structured manner.
• Support the development of proactive strategies to address evolving cybersecurity risks.
• Maintain effective communication with internal security teams and external intelligence communities.

Cybersecurity Governance and Compliance

• Apply knowledge of relevant cybersecurity standards and regulatory requirements when conducting threat intelligence activities.
• Support alignment with ISO 27001 information security requirements.
• Consider applicable UAE National Electronic Security Authority (NESA) requirements.
• Apply relevant Payment Card Industry Data Security Standard (PCI DSS) considerations.
• Understand cybersecurity requirements associated with SWIFT environments.
• Ensure digital evidence collection, preservation and analysis follow applicable legal and regulatory standards.
• Support appropriate documentation and reporting of threat intelligence and forensic investigation activities.

Stakeholder Collaboration and Intelligence Sharing

• Work closely with the Head of Information Security Cyber Defense Operations.
• Collaborate with SOC analysts, cybersecurity specialists and other internal stakeholders.
• Engage with external intelligence communities and relevant threat information sources.
• Promote effective intelligence sharing to strengthen cyber defense capabilities.
• Provide leadership and technical guidance on threat intelligence analysis and investigation practices.
• Support continuous improvement in threat detection, analysis and reporting.

Required Qualifications and Experience

• 10 years of professional experience in cyber threat intelligence and threat analysis.
• Experience within large financial institutions is preferred.
• Bachelor 's or master 's degree in Engineering, Information Technology or a related technical discipline.
• Strong experience identifying, collecting, analysing and reporting cyber threat intelligence.
• Hands‑on expertise in malware analysis, reverse engineering and digital forensic investigations.
• Experience collecting, preserving and analysing digital evidence in compliance with legal and regulatory requirements.
• Proficiency with forensic investigation tools and techniques, including EnCase.
• Strong knowledge of Threat Intelligence Platforms and their integration with SOC environments.
• Deep understanding of cyber threat analysis frameworks and adversary behaviour.
• Familiarity with OSINT techniques and commercial threat intelligence feeds.
• Knowledge of relevant cybersecurity standards and regulatory requirements.
• Strong leadership, strategic thinking, analytical and stakeholder communication skills.

Required Technical Skills

Cyber Threat Intelligence

• Threat intelligence collection and analysis.
• Strategic and operational threat intelligence.
• Cyber threat landscape monitoring.
• Open‑Source Intelligence (OSINT).
• Commercial threat intelligence feeds.
• Threat Intelligence Platforms (TIPs).
• SOC threat intelligence integration.
• Threat intelligence reporting and assessment.

Threat Analysis Frameworks

• MITRE ATT&CK.
• Cyber Kill Chain.
• Diamond Model of Intrusion Analysis.
• Adversary techniques and attack pattern analysis.
• Threat correlation and intelligence assessment.

Malware Analysis and Digital Forensics

• Malware analysis.
• Reverse engineering.
• Digital forensic investigations.
• Digital evidence collection and preservation.
• Forensic evidence analysis.
• EnCase forensic tools.
• Investigation documentation and evidence handling.

Cybersecurity Standards and Regulations

• ISO 27001.
• NESA security requirements.
• PCI DSS.
• SWIFT security requirements.
• Legal and regulatory considerations for digital evidence handling.

Relevant Professional Certifications

• GIAC Cyber Threat Intelligence (GCTI).
• Certified Threat Intelligence Analyst (CTIA).
• Certified Information Systems Security Professional (CISSP).
• Certified Information Security Manager (CISM).
• GIAC Certified Forensic Analyst (GCFA).
• GIAC Reverse Engineering Malware (GREM).
• EnCase Certified Examiner (EnCE).

Leadership and Professional Competencies

• Strong leadership and threat intelligence management capabilities.
• Strategic thinking and proactive cybersecurity risk assessment.
• Advanced analytical and investigative skills.
• Ability to interpret complex threat intelligence and technical findings.
• Effective communication with security leadership and technical stakeholders.
• Strong collaboration across cybersecurity teams and external intelligence communities.
• Ability to translate technical threat information into actionable recommendations.
• Commitment to continuous improvement in cyber threat detection and analysis.

Candidate Profile

The ideal candidate will be a senior cybersecurity professional with extensive experience leading threat intelligence activities in complex enterprise or financial services environments. The role requires a combination of strategic cyber threat intelligence leadership and practical technical expertise in malware analysis, reverse engineering, digital forensics and SOC‑integrated intelligence platforms. Candidates should demonstrate a strong understanding of cyber threat frameworks, intelligence collection methodologies, regulatory considerations and the evolving threat landscape affecting banking institutions. The successful candidate will be capable of delivering clear, actionable intelligence to security leadership while strengthening the organization 's proactive cyber defense and threat analysis capabilities.