Driving jobs in United Arab Emirates

Abu Dhabi, United Arab Emirates | Posted on 04 / 23 / 2025

CyberGate Defense, an IHC company, is a leading force in cybersecurity innovation, dedicated to enhancing the digital resilience of organizations across the region. Established with the mission to fortify the region’s cybersecurity landscape, CyberGate harnesses extensive expertise to tackle complex information security and operational challenges.

Our commitment to driving progress is reflected in our broad range of cybersecurity services and solutions. By leveraging cutting-edge, disruptive technologies, we deliver transformative, human-centric security solutions that safeguard organizations and empower them to navigate a secure and dynamic digital future.

With a wealth of in-house knowledge, CyberGate Defense is well-equipped to address the most intricate cybersecurity issues. We strive to make digital transformation secure, accessible, and beneficial, ensuring that organizations throughout the region thrive in an increasingly interconnected digital world.

Job Description

We are seeking a highly skilled and experienced MSS Threat Intelligence Lead who will be responsible for leading the threat intelligence and brand monitoring functions within our Managed Security Services (MSS) offering. This role is critical in providing proactive, actionable intelligence to protect client environments and digital assets from emerging cyber threats. The individual will coordinate closely with key stakeholders, including SOC teams, MSS Engineering, Service Delivery Managers (SDMs), Incident Response, Legal, and Compliance teams, to ensure that intelligence operations are aligned with client requirements and overall business objectives.

The role also involves overseeing threat intelligence collection, analysis, and dissemination, as well as leading efforts in digital brand protection, threat actor tracking, and the integration of threat intelligence into operational security workflows.

Key Responsibilities and Accountabilities :

1. Develop and drive the threat intelligence vision, roadmap, and operational strategy across MSS services.
2. Establish processes for proactive threat hunting, intelligence collection, analysis, and dissemination.
3. Align threat intelligence practices with industry frameworks such as MITRE ATT&CK, NIST, and ISO 27001.

Digital Brand Monitoring & Protection

1. Lead efforts to detect, analyze, and respond to digital threats targeting client brands (e.g., domain spoofing, phishing, impersonation, and social media abuse).
2. Monitor dark web, surface web, and deep web sources for brand-related threats using threat intelligence and DRP platforms.
3. Coordinate takedowns and legal escalations for fraudulent domains, fake profiles, and leaked sensitive data.
4. Identify emerging threats, IOCs, and TTPs targeting key industries and clients.
5. Analyze intelligence from OSINT, commercial feeds, industry ISACs, and proprietary MSS telemetry.
6. Correlate threat data with internal incidents and SOC use cases to enhance detection capabilities.
7. Deliver strategic, operational, and tactical intelligence reports for internal teams and MSS clients.
8. Create weekly threat landscape updates, actor profiles, sector-specific threat advisories, and executive briefings.
9. Establish and maintain intelligence dashboards and alerting mechanisms.

Tooling, Automation & Integration

1. Evaluate and optimize threat intelligence and brand protection platforms.
2. Work with MSS Engineering to automate threat ingestion, enrichment, and correlation within SIEM and SOAR platforms.
3. Ensure seamless integration of threat intelligence feeds into detection and response workflows.
4. Identify intelligence gaps, process inefficiencies, and operational risks related to threat intelligence and brand monitoring.
5. Establish governance for threat intel validation, classification, and dissemination policies.

Post-Incident Intelligence & Continuous Improvement

1. Support incident response teams with threat context, adversary attribution, and post-incident retrospectives.
2. Incorporate lessons learned from incidents into threat models and operational procedures.
3. Continuously improve threat intelligence operations based on client feedback, evolving threats, and internal audits.

Qualifications :

• 8+ years in threat intelligence, security operations, or digital risk protection, with a focus on brand monitoring, threat analysis, and leadership of cyber intelligence functions.
• Strong understanding of threat intelligence lifecycle, SIEM, SOAR, dark web monitoring, phishing detection, log analysis, and security frameworks (MITRE ATT&CK, NIST, ISO 27001).
• Proven experience managing intelligence-driven initiatives using ITIL, Agile, or PMP-aligned methodologies, with a track record of cross-functional stakeholder coordination.
• Ability to communicate complex threat intelligence concepts clearly to both technical analysts and non-technical executives, including delivering briefings, reports, and threat advisories.
• Excellent analytical and investigative skills to identify emerging threats, detect anomalies, and drive proactive mitigation strategies.
• Bachelor’s degree in computer science, Information Security, or a related field.