About the job:
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
This is an exciting opportunity to join the company Intelligence, delivering our Advanced Intelligence Access (AIA) service. As part of your role, you will be onsite and embedded with a customer four to five days per week, leveraging the company's cyber threat intelligence to enable network defenders and customer CTI teams to defend against the threats they face. You will be supported by a network of colleagues and specialists across the company Intelligence, contributing to its wealth of deep technical skills and CTI knowledge. You will have access to industry-leading tooling and data, with a focus on delivering on customer priority intelligence requirements.
The role is centered around supporting the customer's CTI defensive mission by assisting their SOC, threat hunters, detection engineers, and CTI analysts to counter threats, ensuring the safe and secure running of their networks and operations.
As the Advanced Intelligence Access (AIA) Integrator for a customer, you will be tasked with performing strategic and operational research and analysis of adversarial cyber threats. This includes correlating intelligence to develop insights into tracked threat activity and supporting the integration of CTI into the customer's security processes and technologies, including SIEM and TIP systems.
Responsibilities:
- Evaluate tools and best practices for tracking advanced threats, techniques, and procedures (TTPs) of attackers' motivations, and industry and attacker trends.
- Track and contribute CTI analysis within the company regarding the customer's priority threat concerns.
- Enable customer SOC analysts to deploy and leverage the company's CTI.
- Generate CTI and analyze customer data, utilizing their bespoke sources to identify threat activity or to build and automate analytical workflows.
- Write intelligence reporting based on customer requirements suitable for their intelligence analysts or senior readers.
Minimum qualifications:
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
- 5 years of experience working in a government or military environment, leveraging and developing CTI for network, host, and log analysis to enable the detection and response to cyber threats.
- Experience in leveraging CTI to describe, track, and develop new intelligence on Advanced Persistent Threats.
- Experience in network IDS monitoring, EDR solutions, SIEM and SOAR integration, and managing and contributing CTI into a Threat Intelligence Platform.
Preferred qualifications:
- Experience in conducting or supporting incident response and investigations within enterprise environments.
- Experience in SOC operations, threat hunting, detection engineering, and SOC workflow optimization.
- Understanding of core cybersecurity concepts, common enterprise IT infrastructure components, operating system internals, and networking.
