Analyst - Cyber Threat Intelligence

About the role

The Analyst – Cyber Threat Intelligence will join the Digital Defence Center in Dubai, focusing on proactive threat hunting, incident response, and intelligence gathering to protect the organisation’s assets across on‑premises and multi‑cloud environments.

Key responsibilities

• Conduct proactive threat hunting using digital forensics, security tools and custom scripts.
• Perform offensive security assessments with Metasploit, exploit development, OSINT and enterprise network attack simulations.
• Analyse cyber breaches, map attacker behaviour to the MITRE ATT&CK framework and the Cyber Kill Chain.
• Lead incident response and digital forensic investigations during active security incidents.
• Parse system, security and application logs to identify indicators of compromise.
• Research emerging threats, threat actors, vulnerabilities and attack techniques using Threat Intelligence Platforms.
• Develop and use custom forensic tools, scripts and automation for investigations.
• Work with large data sets using SQL/KQL, Python, Splunk and EDR solutions.
• Report findings and provide actionable intelligence to improve the overall security posture.
• Collaborate with cybersecurity and technology teams during major incidents.

Required profile

• Bachelor’s degree in Computer Science, Engineering, Business or a related field.
• 5–7 years of overall experience, including 3–5 years in cybersecurity.
• 3+ years of hands‑on experience in Digital Forensics, Incident Response, Threat Hunting or Red Teaming.
• Strong knowledge of the Cyber Kill Chain, attacker techniques and the full attack lifecycle.

Required skills

• Threat Intelligence Platforms (Recorded Future, Flashpoint, Blueliv, Anomali, ThreatIQ)
• Digital forensics tools and scripting
• SQL, KQL, Python
• Splunk and EDR solutions
• Metasploit, exploit development, OSINT, enterprise network attack simulation
• MITRE ATT&CK framework
• Cyber Kill Chain methodology