Threat Intelligence Engineer

Total-TECH Co.; Riyadh; On-site; SAR 224,971 - 337,457; Full time

Job summary

A cybersecurity solutions company is seeking a professional to integrate and manage Threat Intelligence Platforms while optimizing automated incident response. Key responsibilities include threat enrichment for SIEM/XDR alerts, proactive threat hunting, and collaboration with cybersecurity teams on incident management. Additionally, maintaining threat intelligence dashboards and reporting will be essential. The ideal candidate will bring strong analytical skills and a proactive approach to cybersecurity challenges.

Responsibilities

• Integrate multiple Threat Intelligence Platforms (TIPs) to centralize and correlate threat feeds.
• Configure, manage, and optimize SOAR playbooks for automated incident response.
• Enrich SIEM/XDR alerts using threat intelligence to enhance detection and triage.
• Perform proactive threat hunting across endpoints, networks, and cloud environments.
• Collaborate with SOC and IR teams to manage phishing campaigns, malware outbreaks, and APT investigations.
• Maintain threat intelligence dashboards and deliver monthly intelligence reports to stakeholders.

Job description

The Job Description

• Integrate multiple Threat Intelligence Platforms (TIPs) to centralize and correlate threat feeds.
• Configure, manage, and optimize SOAR playbooks for automated incident response.
• Enrich SIEM/XDR alerts using threat intelligence to enhance detection and triage.
• Perform proactive threat hunting across endpoints, networks, and cloud environments.
• Collaborate with SOC and IR teams to manage phishing campaigns, malware outbreaks, and APT investigations.
• Maintain threat intelligence dashboards and deliver monthly intelligence reports to stakeholders.