business analyst

data analyst

cyber security engineer

treasury analyst

bi analyst

cyber threat intelligence analyst

DTS Solution

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Work as a Cyber Threat Intel Analyst in DTS Solution   HawkEye CSOC cyber command center.<br> </li>
 <li>
<i> </i> 
 Analyze and research known indicators, correlate events, identify malicious activity, and discover new sources to provide early warning related to a variety of Cyber threats.<br> </li>
 <li>
<i> </i> 
 Monitor Open Source information feeds and threat actor activity to identify activity levels and indicators for Cyber threats and Cyber-attacks.<br> </li>
 <li>
<i> </i> 
 Identify Open Source Intelligence (OSINT) threats relevant to the DTS Solution - HawkEye CSOC customer s environment and develop relevant reports.<br> </li>
 <li>
<i> </i> 
 Provide daily (business day) collections, reviews, analysis and filtering of Open Source Intelligence (OSINT) and SOCMINT (Social Media Intelligence)<br> </li>
 <li>
<i> </i> 
 Identify and investigate malicious actors with the interest and capability to target client and its infrastructure.<br> </li>
 <li>
<i> </i> 
 Develop and provide a Cyber Threat Intelligence Report, Monthly Report and Quarterly Report and an Annual Report.<br> </li>
 <li>
<i> </i> 
 Reviews all current threat intelligence feeds in use, categorizes and prioritizes by relevancy.<br> </li>
 <li>
<i> </i> 
 Provide proactive APT hunting, incident response support, and advanced analytic capabilities.<br> </li>
 <li>
<i> </i> 
 Analyze threat information reports and intelligence summaries, trends, gaps, and methods of operation.<br> </li>
 <li>
<i> </i> 
 Review audit logs and identify any unusual or suspect behavior.<br> </li>
 <li>
<i> </i> 
 Initiates ad-hoc threat intelligence work parcel assignments for Tier I/II analysts and reviews/expands the SOC daily recurring activity SOP s.<br> </li>
 <li>
<i> </i> 
 Develops reports that can be sent for awareness to various groups and levels of leadership.<br> </li>
 <li>
<i> </i> 
 Engage constructively in cross-functional projects designed to improve DTS Solution - HawkEye CSOC and its customers  security postures.<br> </li>
 <li>
<i> </i> 
 Understanding of geo-political dynamics and how they affect the wider cyber threat landscape.<br> </li>
 <li>
<i> </i> 
 Experience using Cyber Kill Chain.<br> </li>
 <li>
<i> </i> 
 Expertise on in using Threat Intelligence Platforms (Recorded Future, Flashpoint, Blueliv, Anomali, ThreatIQ etc.)<br> </li>
 <li>
<i> </i> 
 Expertise in using Digital Risk Management platforms that looks for dark web activities, breaches,<br> </li>
 <li>
<i> </i> 
 Have a curated list of important threat intel fusion across various sources<br> </li>
 <li>
<i> </i> 
 Knowledge on dark web and accessing dark web forums, IRCs, chat groups etc.<br> </li>
 <li>
<i> </i> 
 Knowledge on APT groups and monitoring all activities through handlers<br> </li>
 <li>
<i> </i> 
 Curate newsletter and social media weekly posts based on weekly activities in the cyberspace.<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 4+ years of experience on extract and disseminate open source intelligence (OSINT)<br> </li>
 <li>
<i> </i> 
 Regional expertise as applied to threat actors<br> </li>
 <li>
<i> </i> 
 Familiarity with alternative analysis techniques and predictive analysis methodology<br> </li>
 <li>
<i> </i> 
 Experience with conducting intelligence investigations and familiarity with investigative tools, including Maltego, DomainTools, and VirusTotal<br> </li>
 <li>
<i> </i> 
 Familiarity with Threat Rating Methodology<br> </li>
 <li>
<i> </i> 
 Experience using Threat Intelligence Platforms (TIPs)<br> </li>
 <li>
<i> </i> 
 Active memberships with associations across the security and intelligence community<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Certified Ethical Hacker (CEH)<br> </li>
 <li>
<i> </i> 
 SANS Certified Intrusion Analyst (GCIA)<br> </li>
 <li><br></li></ul></div></div><div><div><div><div><div><div><div> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

Cyber Threat Intelligence Analyst

B&S Group

<div><b>Company Description</b><p><b><br>
This is B&amp;S</b></p><p>
B&amp;S exists to make premium consumer goods available to everyone, anywhere. We believe that getting access to consumer products that bring joy and comfort into everyday lives, should be easy around the globe.</p><p>
Are you curious about who we are as an employer and our thoughts on diversity and inclusion? Click here to find more information!</p><b><br>
Job Description</b><p><br>
We are looking for an IT Risk and Threat Analyst to support the IT risk management practice, ensuring that risks are proactively identified, mitigated, communicated, and monitored. The role involves recommending appropriate and effective management processes across all aspects of information technology for B&amp;S. The analyst will also analyze cyber-threats, identify patterns in cyber-attacks, and report on emerging cyber-threat trends. This position requires close collaboration with IT, Security, Risk, and Business teams to enable data-driven risk management and strengthen overall cybersecurity posture.<br>
<br>
<b>Key Responsibilities</b></p><ul><li>
Work closely with other technical, incident management, and security analysts to develop a fuller understanding of cyber threat actor&rsquo;s intent, objectives, and activities of cyber threat actors and define a world-class cyber defense program.</li><li>
Conduct research and evaluate technical and all-source cyber intelligence to develop in-depth assessments of threats to the organization&rsquo;s networks, systems, users, and data.</li><li>
Ensure effective execution of the risk management framework by managing relationships with key stakeholders within strategic business groups and technology.</li><li>
Verify that IT risks are appropriately mitigated and lead multiple stakeholders in agreement on appropriate solutions/controls</li><li>
Create technical assessments and cyber threat profiles of current events based on the inventive collection and research using classified and open information sources to enable advanced threat intelligence</li><li>
Develop, track, and report on Key Risk Indicators (KRIs) for information technology.</li><li>
Monitor, track, and report mitigation and resolution of IT risks.</li><li>
Perform process-level walkthroughs, control testing, etc. for the identification and assessment of IT risks and controls.</li></ul><p></p><b><br>
Qualifications</b><br>
<ul><li>
Have a bachelor&rsquo;s degree in IT or computer science.</li><li>
Have 5+ years of IT experience within a similar role.</li><li>
Have professional certifications like CISSP, CISM, CISA, or CRISC.</li><li>
Understand key technology concepts such as access control, confidential data, encryption, business continuity, info-sec scans, and vendor apps.</li><li>
Have a strong knowledge of IT organization business processes and systems including (IT Security, data management, architectural and planning, technology life cycle management, regulatory concerns).</li><li>
Have a strong communication skill to work effectively with employees at all levels of the organization.</li><li>
Have excellent problem-solving skills and the ability to be highly productive, working alone and as part of a team.</li></ul><br>
<b>
Additional Information</b><p><b><br>
We offer you</b></p><ul><li>
A good salary fitting with your experience, and a discretionary yearly performance-based bonus</li><li>
A good working atmosphere in a young and ambitious team.</li><li>
Company sponsored visa along with health insurance.</li><li>
Leave benefits as per UAE labour law.</li><li>
Annual air-ticket to your home country</li></ul><p><b>
Why join us?</b></p><ul><li>
Be part of a multinational and multicultural company.</li><li>
Dynamic, multicultural environment fostering innovation and professional growth.</li><li>
Opportunity to contribute to high-impact financial strategies.</li></ul><p><b>
Where will you be working?</b><br>
You will be working in our Dubai office, where you will benefit from the guidance and support of our diverse team. Alongside your responsibilities, you will have the opportunity to immerse yourself in a collaborative culture that emphasizes teamwork, creativity, and a strong work ethic.</p></div>

IT Risk & Threat Analyst

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Work as a Cyber SOC Tier 1 Analyst in DTS Solution   HawkEye CSOC cyber command center.<br> </li>
 <li>
<i> </i> 
 The security analyst Tier 1 monitors security events from the various SOC entry channels (SIEM, Tickets, Email and Phone), based on the security event severity, escalate to managed service support teams, tier 2 security analyst, and/or customer as appropriate to perform further investigation and resolution.<br> </li>
 <li>
<i> </i> 
 Reviews trouble tickets generated by SIEM Leverages emerging threat intelligence (IOCs, updated rules, etc.) to identify affected systems and the scope of the attack.<br> </li>
 <li>
<i> </i> 
 Reviews and collects asset data (configs, running processes, etc.) on systems for further investigation.<br> </li>
 <li>
<i> </i> 
 Will actively monitor security threats and risks, provide in-depth incident analysis, evaluate security incidents, and will provide proactive threat research.<br> </li>
 <li>
<i> </i> 
 Work closely with the Tier 2 Analyst to assess risk and provide recommendations for improving DTS Solution - HawkEye CSOC s customer security posture.<br> </li>
 <li>
<i> </i> 
 Participate in security incident management and vulnerability management processes. Identify, perform, review or track security incident investigations to resolution and identify lessons learnt.<br> </li>
 <li>
<i> </i> 
 Identify, perform or review root cause analysis efforts following incident recovery to enhance operations.<br> </li>
 <li>
<i> </i> 
 Participate in evaluating, recommending, implementing, and troubleshooting security. solutions and evaluating IT security of the new IT Infrastructure systems.<br> </li>
 <li>
<i> </i> 
 Ensure that corporate data and technology platform components are safeguarded from known threats.<br> </li>
 <li>
<i> </i> 
 Develop, implement and test new SIEM use cases. Regularly identify and develop new use cases for automation and tuning of security tools<br> </li>
 <li>
<i> </i> 
 Provide technical guidance to the customer s technical teams during the configuration of new log sources.<br> </li>
 <li>
<i> </i> 
 Understanding and implementing the SOC processes and procedures.<br> </li>
 <li>
<i> </i> 
 Follow standard operating procedures for detecting, classifying, and reporting.<br> </li>
 <li>
<i> </i> 
 Triage events for criticality and escalate according to predefined processes incidents under the supervision of Tier 2 and Tier 3 staff.<br> </li>
 <li>
<i> </i> 
 Communicate effectively with customers, team-mates, and management.<br> </li>
 <li>
<i> </i> 
 Provide input on tuning and optimization of security systems.<br> </li>
 <li>
<i> </i> 
 Follow ITIL practices regarding incident, problem and change management.<br> </li>
 <li>
<i> </i> 
 Document and maintain customer build documents, security procedures and processes.<br> </li>
 <li>
<i> </i> 
 Stay up to date with current vulnerabilities, attacks, and countermeasures.<br> </li>
 <li>
<i> </i> 
 Reviews the latest alerts to determine relevancy and urgency.<br> </li>
 <li>
<i> </i> 
 Creates new trouble tickets for alerts that signal an incident and require Tier 2 / Incident Response review.<br> </li>
 <li>
<i> </i> 
 Manages and configures security monitoring tools (SIEM, SYSLOG, NETFLOW, FIM, SYSMON etc.)<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 3+ years of experience of network/security architecture or operations experience<br> </li>
 <li>
<i> </i> 
 Experience working on specific SOC/SIEM platforms<br> </li>
 <li>
<i> </i> 
 Excellent experience in Elastic (ELK), Splunk, Wazuh, LogRhythm<br> </li>
 <li>
<i> </i> 
 Experience in SOAR technologies   Demisto, Cybersponse, FortiSOAR, Swimlane<br> </li>
 <li>
<i> </i> 
 Excellent experience in MDR or EDR<br> </li>
 <li>
<i> </i> 
 Experience in using security tools   commercial and open source<br> </li>
 <li>
<i> </i> 
 Experience in defensive technologies   NGFW, AV, VPN, IPS, NETFLOW, DAM, WAF, Proxy, Web Filtering etc. Ability to inspect using PCAP files.<br> </li>
 <li>
<i> </i> 
 Knowledge with Threat Hunting and MITRE ATT&amp;CK Methodology<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 GIAC Certified Intrusion Analyst (GCIA)<br> </li>
 <li>
<i> </i> 
 GIAC Certified Enterprise Defender (GCED) issued by GIAC<br> </li>
 <li>
<i> </i> 
 GIAC Certified Incident Handler (GCIH) issued by GIAC<br> </li>
 <li>
<i> </i> 
 Certified Ethical Hacker (CEH) issued by EC-Council<br> </li>
 <li><br></li></ul></div></div><div><div><div><div><div><div><div> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

SOC Analyst - Tier 1

Palo Alto Networks

<div><b>Company Description</b><p><b><br>
Our Mission</b></p><p>
At Palo Alto Networks&reg; everything starts and ends with our mission:</p><p>
Being the cybersecurity partner of choice, protecting our digital way of life.<br>
Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we&rsquo;re looking for innovators who are as committed to shaping the future of cybersecurity as we are.</p><p><b>
Who We Are</b></p><p>
We take our mission of protecting the digital way of life seriously. We are relentless in protecting our customers and we believe that the unique ideas of every member of our team contributes to our collective success. Our values were crowdsourced by employees and are brought to life through each of us everyday - from disruptive innovation and collaboration, to execution. From showing up for each other with integrity to creating an environment where we all feel included.</p><p>
As a member of our team, you will be shaping the future of cybersecurity. We work fast, value ongoing learning, and we respect each employee as a unique individual. Knowing we all have different needs, our development and personal wellbeing programs are designed to give you choice in how you are supported. This includes our FLEXBenefits wellbeing spending account with over 1,000 eligible items selected by employees, our mental and financial health resources, and our personalized learning opportunities - just to name a few!</p><b><br>
Job Description</b><p><b><br>
Your Career</b></p><p>
As a Principal Consultant in Unit 42 you will have the opportunity to work across a number of proactive cyber security domains including Cloud Security, Security Operations, Cyber Risk Management and Artificial Intelligence in cyber security.</p><p>
We are seeking an individual who is passionate about cyber security, curious with a demonstrated track record of continuous learning, and has the technical acumen to embrace data, technological and innovative approaches to deliver the best consulting outcomes for clients, as they work to address the challenges associated with today&rsquo;s cyber threat landscape.</p><p><b>
Your Impact</b></p><ul><li>
Principal SOC Advisory : 6+ years of consulting experience in SOC, security engineering, SIEM administration, and incident management and demonstrated success with serving large, multinational organisations in designing and implementing an organisation&rsquo;s security operations program, organisational structures, and capabilities</li><li>
Possess a deep technical knowledge in Security Incident and Event Management (SIEM) platforms, Security Orchestration and Response (SOAR) technologies, Endpoint Protection and Response/Next Gen Protection and Response (EDR/XDR) tools, Next GenFirewalls, Threat Intelligence and Hunting platforms</li><li>
Defensive Security Skills (desired) : Experience in security operations design, engineering and/or analysis and investigations, ideally in complex environments, with security event correlations across a variety of sources i.e. cloud, network, endpoint, logs</li><li>
Ability to perform detailed assessments, identify areas for improvement and make recommendations to transform an organisation's cyber security operations and capabilities to better protect, detect and rapidly respond to modern threats.</li><li>
Demonstrated experience in improving an organisations security operations capabilities such as improvements in asset visibility, threat detection capabilities, automation techniques, case management, enablement of compliance and regulatory requirements</li><li>
Experience in conducting threat hunting and/or compromise assessments to identify active or dormant indicators of compromise (IoCs) or evidence of unknown threats within an organisations digital environment</li><li>
Relevant industry certifications including GIAC Defensible Security Architect (GDSA), GIAC Intrusion Analyst (GCIA), GIAC Continuous Monitoring (GMON), CISSP</li><li>
Understanding of cyber risk frameworks or industry standards such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC</li><li>
Principal Cloud Security : 6+ years of experience performing cloud security advisement and risk assessments based upon industry-accepted standards</li><li>
Hands-on experience with a cloud hosting provider (AWS, Azure, GCP, etc)</li><li>
Experience with a Cloud Application Security Broker - MCAS, Netskope</li><li>
Possess a deep technical knowledge in CASBs, Cloud Platforms and the dependencies around such an environment (WAF, SSO, Cloud Threats, API Security, Cloud Security Posture Management)</li><li>
Former experience with cloud migrations (cloud to cloud, or on-prem to cloud)</li><li>
Knowledge of command-line interfaces or scripting tools in cloud environments is a plus</li><li>
Cloud Security skills (desired): Secure software development practices, including SecDevOps</li><li>
Sound knowledge of applicable frameworks &amp; standards, including OWASP, MITRE ATT@CK &amp; D3FEND, CIS, NIST CSF, CSA CCM &amp; ISO 27107</li><li>
Relevant industry certifications including CSCP</li><li>
Understanding of cyber risk frameworks or industry standards such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC</li><li>
Principal Cyber Risk Management: Experience in performing cyber security threat &amp; risk assessments to support the development of cyber security strategies and roadmaps</li><li>
Technical proficiency in a wide range of cyber risk management services, including cyber threat, risk and control assessments, secure software development practices, penetration testing, vulnerability assessments, among others</li><li>
Sound knowledge of applicable laws, compliance regulations, and industry standards as it relates to privacy, security, and compliance</li><li>
Sound knowledge of applicable frameworks, including MITRE ATT@CK &amp; D3FEND, CIS, NIST CSF, CSA CCM</li><li>
Strong communication and presentation skills</li><li>
Cyber Risk Management skills (desired) : Experience in threat modelling &amp; application security risk assessments, secure software development practices, including SecDevOps</li><li>
FAIR Open certified &amp; experience in applying FAIR for cyber risk quantification</li><li>
Relevant industry certifications including CISSP, CISM, CISA</li><li>
Understanding of cyber risk frameworks or industry standards such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC</li></ul><br>
<b>
Qualifications</b><p><b><br>
Your Experience</b></p><ul><li>
6+ years of experience performing cyber security consulting in at least two of the three domains above, with SME experience in one of the domains</li><li>
Experience managing a team of consultants</li><li>
Demonstrates a track record in strengthening existing and developing new client relationships</li><li>
Ability to strive in a startup environment</li><li>
Ability to perform travel requirements as needed to meet business demands</li><li>
Identified ability to grow into a valuable contributor to the practice and, specifically -</li><li>
Have an external presence via public speaking, conferences, and/or publications</li><li>
Have credibility, executive presence, and gravitas</li><li>
Able to have a meaningful and rapid delivery contribution</li><li>
Have the potential and capacity to understand all aspects of the business and an excellent understanding of PANW products</li><li>
Collaborative and able to build relationships internally, externally, and across all PANW functions, including the sales team</li><li>
Bachelor&rsquo;s Degree in Information Security, Computer Science, Digital Forensics, Cyber Security OR equivalent years of professional experience or equivalent military experience to meet job requirements and expectations</li></ul><br>
<b>
Additional Information</b><p><b><br>
The Team</b></p><p>
Unit 42 Consulting is Palo Alto Network's security advisory team. Our vision is to create a more secure digital world by providing the highest quality incident response, risk management, and digital forensic services to clients of all sizes. Our team is composed of recognized experts and incident responders with deep technical expertise and experience in investigations, data breach response, digital forensics, and information security. With a highly successful track record of delivering mission-critical cybersecurity solutions, we are experienced in working quickly to provide an effective incident response, attack readiness, and remediation plans with a focus on providing long-term support to improve our clients&rsquo; security posture.</p><div></div><p><b>
Our Commitment</b><br>
<br>
We&rsquo;re problem solvers that take risks and challenge cybersecurity&rsquo;s status quo. It&rsquo;s simple: we can&rsquo;t accomplish our mission without diverse teams innovating, together.</p><p>
We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com.</p><p>
Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.</p><p>
All your information will be kept confidential according to EEO guidelines.</p></div>

Principal Consultant, Proactive Services - SOC (Unit 42)

ZeroFOX Inc.

<p>ZeroFox is seeking a creative, results-driven Intelligence Analyst with strong analytical skills, regional expertise, and language capabilities. The ideal candidate excels at online investigations, connecting the dots to deliver actionable threat intelligence across cyber, physical, reputational, and compliance domains. You'll assess risks, analyze trends, and provide clear, proactive reporting to support critical client protection. This role requires critical thinking, discretion, and a passion for fast-paced, mission-driven work that strengthens long-term client trust.</p><p><strong>Role and Responsibilities:</strong></p><ul><li>Leverage your analytical skills and tradecraft;</li><li>Proactively update the Client's ZeroFox Platform, creating reporting that clearly shows the effectiveness of their solution, providing ongoing education, and being the internal ZeroFox advocate for your Clients needs;</li><li>Assist in customer care and all production aspects, covering the range of assigned duties. Support and/or lead recurring deliverables and touchpoints</li><li>Provide security alerts, short and long-form intelligence reports, and investigative summaries;</li><li>Focus on customer-specific collections metrics, key observables, and other quantifiable datasets to support value-add.</li></ul><p><strong>Intelligence-Specific Requirements</strong></p><ul><li>General experience in threat intelligence</li><li>Understanding of the threat intelligence lifecycle</li><li>Experience in writing both brief and long-form intelligence and investigative reports</li><li>Experience in orally delivering intelligence briefs or presentations in English and Iraqi Arabic</li><li>Experience in analyzing and synthesizing large amounts of data and information to turn it into actionable intelligence</li></ul><p><strong>Analyst-Specific Requirements</strong></p><ul><li>Ability to convey complex ideas, trends, and information in a simple way</li><li>Experience servicing or working face-to-face with Clients</li><li>Ability to liaise between various internal and external teams</li><li>Ability to navigate Client issues, incidents, and culture in a respectful and timely manner</li><li>Ability to assess, write, and communicate in an informed, objective, and timely manner</li><li>Ability to quickly and effectively respond to requests and meet deadlines</li><li>Proven use of discretion when making important decisions</li><li>Strong organizational skills and ability to prioritize and track multiple projects in tandem</li><li>Strong attention to detail and proven research skills</li><li>Strong data analysis skills</li><li>Ability to translate Client requirements into tactical and operational processes</li><li>Quick ability to adapt and recommend solutions as needed based on evolving situations</li><li>Ability to be highly collaborative but also work independently</li></ul><p><strong>Tooling and Technology Experience Qualifications</strong></p><ul><li>Direct Client advocacy and engagement experience in post-sales or professional services functions</li><li>Provide advice and guidance as the subject matter expert to ensure successful ongoing usage of and value from the ZeroFox platform</li><li>Ability to assist in facilitating requests for new platform configuration and changes to use cases within the Client environment. Work with the Client on an ongoing basis, attending all recommended calls and meetings</li><li>Design and develop innovative solutions to Client requirements using ZeroFox's platform</li><li>Deliver web-based training to user groups to support organizational adoption</li><li>Undertake discovery and education activities to identify opportunities for ZeroFox usage across organizational functions and processes</li><li>Assist in functioning as a frontline technical resource for "best practice" and informal Client questions</li><li>Initiate engagement with other ZeroFox resources when needed as a Client advocate to ensure speedy resolution of Client issues</li><li>Maintain current functional and technical knowledge of ZeroFox service options</li><li>Help to document best practices in developing and using ZeroFox solutions</li></ul><ul><li>Native speaker or fluency in Iraqi Arabic (must be comfortable reading, writing, speaking and briefing in this language)</li></ul><ul><li>Experience in open source and social media research, or investigations, typically obtained in 2-3 years; ability to connect the dots</li><li>Creativity in leveraging internet search techniques and methods</li><li>Ability to determine the credibility, value, significance, and relevancy of information from different data sources to produce clear, concise, and timely analytical products</li><li>Experience with some of the following: Social Media Platforms, blogs, IRC, Deep / Darkweb, and message boards</li><li>Ability to collect, authenticate, validate and document online evidence</li><li>Strong written and oral communication skills; comfortable with providing briefings and presentations</li><li>Experience producing short and long form reports, applying BLUF or similar models</li><li>Comfort working independently and in teams</li><li>Proficient in Google Suite of productivity tools</li><li>Knowledge of data analytics, dashboards, and reporting</li><li>Skill with various workflow tools: Google Suite, Monday . com, Zendesk.</li><li>Propensity to thrive on change and general dissatisfaction with the "status quo" founded on the belief that great is better than good</li></ul><p><strong>Education / Training Requirements:</strong></p><ul><li>Bachelor's or Graduate degree, preferably in Computer Science, Information Systems, Cyber, Intelligence studies or other similar background</li></ul><p><strong>Physical and Sensory Requirements:</strong></p><p>Mobility, walking, climbing, sitting, standing, reaching, bending, lifting (minimum of 10 lbs), fine eye-hand coordination, ability to read, write, listen and speak clearly, the ability to understand and follow written and oral instructions and directions, ability to travel =/ <p>EOE/AA/M/F/Veteran/Disability Employer</p><ul><li>Competitive compensation</li></ul><ul><li>Community-driven culture with employee events</li><li>Respectful and nourishing work environment, where every opinion is heard and everyone is encouraged to be an active part of the organizational culture</li></ul><p><strong>About us</strong></p><p>ZeroFox is on a mission to make the internet safer for all. Innovation is at our core - we are relentless in the pursuit of finding new ways to disrupt external cyber threats on the surface, deep, and dark web. ZeroFox offers the only unified cybersecurity platform combining advanced AI analytics, digital risk and privacy protection, full-spectrum threat intelligence, and a robust portfolio of breach, incident and takedown response capabilities to protect customers from growing threats across the external attack surface. It's a great time to join us in the Fox Den - with fresh private equity funding, expanding investments in AI, a people-first culture, and centers of excellence around the world, we're growing like never before. If you're looking for a mission-oriented, customer-focused, collaborative team and ready to take the fight to the adversary, apply to join us in the Den today.</p><p><strong>Equal Opportunity</strong></p><p>We aim to build a team that represents a variety of backgrounds, perspectives, and skills. We embrace inclusion and ensure equal employment opportunity without discrimination or harassment based on race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity or expression, age, disability, national origin, marital or domestic/civil partnership status, genetic information, citizenship status, military or veteran status, or any other personal characteristic.</p>

Intelligence Analyst

Commercial Bank of Dubai

<p><br></p> <p> <strong>Job Purpose </strong> </p> <p>Lead CBD's security operations and manage incident response efforts. This role is critical in supporting the CISO office and ensuring the security and resilience of our IT infrastructure and protecting our bank's data and systems from cyber threats.</p> <p> <br> </p> <p> <strong>Principle Accountabilities </strong> </p> <p> <br> </p> <ul> <li>Oversee the daily operations of the Security Operations Center (SOC) working across 1LoD &amp; 2LoD security teams.</li> <li>Develop and implement security monitoring and incident detection strategies.</li> <li>Ensure the effective use of security tools and technologies to protect the bank's assets.</li> <li>Monitor security alerts and manage the response to potential security incidents.</li> <li>Support the CISO office Conduct regular security assessments and audits to identify vulnerabilities.</li> <li>Own the incident response plan to address security breaches and incidents.</li> <li>Lead the incident response team in investigating and resolving security incidents. (24/7 rota with leadership team)</li> <li>Coordinate with internal and external stakeholders during incident response activities.</li> <li>Conduct post-incident reviews and implement lessons learned to improve security measures.</li> <li>Ensure timely and accurate reporting of security incidents to relevant authorities and stakeholders.</li> <li>Develop and maintain a threat intelligence program to identify and analyze emerging threats.</li> <li>Collect, analyze, and disseminate threat intelligence to relevant stakeholders.</li> <li>Collaborate with external threat intelligence providers and industry peers to stay informed about the latest threats.</li> <li>Integrate threat intelligence into security operations and incident response processes.</li> <li>Provide actionable intelligence to enhance the bank's security posture and mitigate risks.</li> <li>Support risk assessments and vulnerability analysis to identify potential threats (ISMS/Projects/Change/Thematic).</li> <li>Support threat modelling as part of DevSecOps and other change activity.</li> </ul>", "order": 1}, {

Senior Manager, Security Operations & Incident Management

Confidential Company

<p><strong>Job Purpose</strong></p><br/><p>To design, implement, manage, and monitor the organization cybersecurity infrastructure. This role is  responsible for protecting information systems, networks, and data from cyber threats by identifying  vulnerabilities, managing risk, and responding to incidents effectively</p><ul><li><strong>Role and Responsibilities</strong></li></ul><br/><p><strong>Network Operations (NOC):</strong></p><br/><p>∙ Monitor network health and</p><p>infrastructure using tools like Nagios,</p><p>Zabbix, or SolarWinds.</p><p>∙ Respond to and escalate outages,</p><p>latency issues, or degradations.</p><p>∙ Perform system maintenance, including  patching, firmware updates, and</p><p>backups.</p><p>∙ Maintain incident logs, technical</p><p>documentation, and root cause reports.</p><p>∙ Ensure high availability and collaborate  with IT on network improvements</p><p><strong>Security Operations (SOC):</strong></p><p>∙ Monitor and triage alerts via SIEM tools  (Splunk, QRadar, Microsoft Sentinel).</p><p>∙ Conduct threat hunting using IOCs,</p><p>TTPs, and threat intelligence feeds.</p><p>∙ Investigate and respond to security</p><p>incidents, collect logs, and perform</p><p>forensic analysis.</p><p>∙ Utilize EDR tools (ESET, CrowdStrike,  Sentinel One,e.g.,) for endpoint threat</p><p>detection.</p><p>∙ Support vulnerability management with  tools like Nessus, Nmap, and Burp</p><p>Suite.</p><p>∙ Write detection scripts using Python,  Bash, or PowerShell.</p><p>∙ Collaborate with Red and Blue Teams  for attack simulations and security drills.</p><p>∙ Apply MITRE ATT&CK, NIST CSF, and  Zero Trust principles in threat defense</p><p>∙ Authority to access, monitor, and audit  any IT system or data as needed for</p><p>cybersecurity operations.</p><p>∙ Authority to block or isolate</p><p>compromised systems or user accounts  during incident response.</p><p>∙ Recommend or initiate upgrades and  changes to security infrastructure and</p><p>controls.</p><p>∙ Escalate cyber risk findings to</p><p>leadership, with decision-making power  during critical incidents</p>

Cyber Security Engineer

Explore 744+ Cyber threat intelligence analyst in Dubai this November. Find roles across top companies and apply now to boost your career.