We are hiring a Threat Hunter for our client in Abu Dhabi on a 1-year renewable contract.
This role is focused on proactively identifying advanced and emerging cyber threats across enterprise environments before they escalate into incidents. You will work across endpoint, network, and SIEM data to detect, investigate, and validate suspicious activity, playing a key role in strengthening overall security posture.
Key Responsibilities:
- Proactively hunt for threats across networks, endpoints, cloud, and security datasets
- Investigate complex alerts and suspicious behaviors from SIEM, EDR/XDR, and other tools
- Analyze logs and telemetry to identify attacker techniques such as lateral movement and privilege escalation
- Validate threats, determine root cause, and recommend remediation actions
- Escalate confirmed incidents and support incident response activities
- Enhance detection capabilities by improving SIEM use cases and security configurations
- Produce clear reports and communicate findings to stakeholders
Requirements:
- 3–6+ years of experience in cybersecurity operations, threat hunting, SOC, or incident response
- Hands-on experience with SIEM, EDR/XDR, and threat detection workflows
- Strong understanding of attacker tactics, techniques, and procedures (TTPs)
- Solid knowledge of networking fundamentals, TCP/IP, and Windows/Linux environments
- Experience analyzing logs, investigating alerts, and distinguishing true vs false positives
- Strong analytical and communication skills
Nice to Have:
- Experience in MDR or government/critical infrastructure environments
- Familiarity with OT/ICS security
- Certifications such as GCFA, GCIH, GCIA, CISSP, CEH, or similar
- Experience with threat intelligence frameworks
