Lead SOC Threat Hunter IT & OT Defender

Employment; Doha; On-site; QAR 350,000 - 700,000; Full time

Job summary

Employment is seeking a senior cybersecurity threat hunter to protect IT and OT environments by detecting, investigating, and proactively hunting threats. You will bridge intelligence with operations to transform threat data into actionable detections and hunting activities.

You will lead malware analysis, develop IOC content, and refine SIEM/SOAR use cases, collaborating with the SOC to elevate cyber defense and ensure compliance with MITRE ATT&CK.

Qualifications

• Bachelor’s degree in information security, computer science, or engineering.
• 10 years of information security experience in a similar position.
• Experience with IT/OT threat hunting and incident investigation.

Responsibilities

• Conduct proactive threat hunting across IT and OT networks using intelligence from threat analysts.
• Analyse and correlate security incidents to understand attacker behaviour and campaign patterns.
• Bridge threat intelligence with detection logic and translate IOCs, TTPs into actionable content for SOC engineers.
• Conduct deep-dive investigations on high-severity alerts with actionable recommendations.
• Support incident response during containment and eradication with context on attacker tools and infrastructure.
• Collaborate with SOC Engineers to refine SIEM/SOAR use cases and playbooks.
• Develop and maintain threat profiles for adversaries targeting IT and OT environments.
• Stay current with emerging threats, tools, and frameworks like MITRE ATT&CK.

Skills

Threat analysis

Threat hunting

Incident investigation

MITRE ATT&CK

Adversary TTPs

Analytical thinking

Cyber defense

Education

Bachelor’s degree in information security, computer science, or engineering

Tools

Ghidra

IDA Pro

x64dbg

Job description

Employment is seeking a senior cybersecurity threat hunter to protect IT and OT environments by detecting, investigating, and proactively hunting threats. You will bridge intelligence with operations to transform threat data into actionable detections and hunting activities.

You will lead malware analysis, develop IOC content, and refine SIEM/SOAR use cases, collaborating with the SOC to elevate cyber defense and ensure compliance with MITRE ATT&CK.