security analyst

cyber analyst

cyber threat intelligence analyst Jobs in Dubai

cyber threat intelligence analyst

it risk & threat analyst

sr. relationship manager (hunter sales) Jobs in Dubai

sr. relationship manager (hunter sales)

threat hunter

DICETEK LLC

<div><p><b>Responsibilities</b></p><ul><li>
Monitor and analyse the organization's networks and systems on a daily basis to detect, identify, investigate, and mitigate potential threats.</li><li>
Identify anomalous behavior, recognize patterns of malicious activity, and take appropriate corrective action
</li><li>Follow detailed operational process and procedures to appropriately analyse, escalate, and assist in remediation of critical information security incidents.</li><li>
Correlate and analyse events using the Splunk/Log Rhythm SIEM tool to detect IT security incidents.</li><li>
Conduct analysis of log files, including forensic analysis of system resource access.</li><li>
Monitor multiple security technologies, such as SIEM, IDS/IPS, EDR, Firewalls, Switches, VPNs, and other security threat data sources.</li><li>
Respond to inbound requests via phone and other electronic means for technical assistance with managed services.</li><li>
Respond in a timely manner (within documented SLA) to support, threat, and other cases.</li><li>
Document actions in cases to effectively communicate information internally and to customers.</li><li>
Resolve problems independently and understand escalation procedure.</li><li>
Maintain a high degree of awareness of the current threat landscape.</li><li>
Perform other essential duties as assigned.</li><li>
Able to work in rotating shifts within a 24/7 operating environment.</li></ul><p>
</p><p><b>Qualifications &amp; Skills</b></p><p>
</p><ul><li>3-5 years of experience in Security Operations, Incident response and monitoring , threat hunting etc.</li><li>
A Degree in Computer Science, Information Systems or equivalent.</li><li>
CCNA, CompTIA CySA+, CISSP, GCA, GCIA, GCIH, CEH, SIEM-specific certifications would be preferable.</li><li>
An active interest in internet security, incident detection, network and systems security.</li><li>
A sound knowledge of IT security best practices, common attack types and detection/prevention methods.</li><li>
Demonstrable experience of analysing and interpreting system, security, and application logs.</li><li>
Knowledge of the type of events that both Firewalls, IDS/IPS, and other security related devices produce.</li><li>
Experience in using SIEM tools such as Splunk &amp; Log Rhythm.</li><li>
TCP/IP knowledge, networking, and security product experience.</li><li>
Knowledge of Cyber Kill Chain and MITRE ATT&amp;CK frameworks.</li><li>
Possible attack activities, such as scans, man in the middle, sniffing, DoS, DDoS, etc. and possible abnormal activities, such as worms, Trojans, viruses, etc.</li><li>
Ability to analyse data, such as logs or packets captures, from various sources within the enterprise and draw conclusions regarding past and future security incidents
</li><li>Strong analytical and problem-solving skills.</li><li>
Very good communication skills.</li><li>
Strong interpersonal skills with the ability to collaborate well with others.</li></ul></div><p></p>

Security Analyst

Confidential Company

<p><strong>Job Purpose</strong></p><br/><p>To design, implement, manage, and monitor the organization cybersecurity infrastructure. This role is  responsible for protecting information systems, networks, and data from cyber threats by identifying  vulnerabilities, managing risk, and responding to incidents effectively</p><ul><li><strong>Role and Responsibilities</strong></li></ul><br/><p><strong>Network Operations (NOC):</strong></p><br/><p>∙ Monitor network health and</p><p>infrastructure using tools like Nagios,</p><p>Zabbix, or SolarWinds.</p><p>∙ Respond to and escalate outages,</p><p>latency issues, or degradations.</p><p>∙ Perform system maintenance, including  patching, firmware updates, and</p><p>backups.</p><p>∙ Maintain incident logs, technical</p><p>documentation, and root cause reports.</p><p>∙ Ensure high availability and collaborate  with IT on network improvements</p><p><strong>Security Operations (SOC):</strong></p><p>∙ Monitor and triage alerts via SIEM tools  (Splunk, QRadar, Microsoft Sentinel).</p><p>∙ Conduct threat hunting using IOCs,</p><p>TTPs, and threat intelligence feeds.</p><p>∙ Investigate and respond to security</p><p>incidents, collect logs, and perform</p><p>forensic analysis.</p><p>∙ Utilize EDR tools (ESET, CrowdStrike,  Sentinel One,e.g.,) for endpoint threat</p><p>detection.</p><p>∙ Support vulnerability management with  tools like Nessus, Nmap, and Burp</p><p>Suite.</p><p>∙ Write detection scripts using Python,  Bash, or PowerShell.</p><p>∙ Collaborate with Red and Blue Teams  for attack simulations and security drills.</p><p>∙ Apply MITRE ATT&CK, NIST CSF, and  Zero Trust principles in threat defense</p><p>∙ Authority to access, monitor, and audit  any IT system or data as needed for</p><p>cybersecurity operations.</p><p>∙ Authority to block or isolate</p><p>compromised systems or user accounts  during incident response.</p><p>∙ Recommend or initiate upgrades and  changes to security infrastructure and</p><p>controls.</p><p>∙ Escalate cyber risk findings to</p><p>leadership, with decision-making power  during critical incidents</p>

Cyber Security Engineer

DTS Solution

<b>Role and Responsibilities 
 
 </b><div>
 <div>
 <ul>
 <li>
<i> </i> 
 Work as a DFIR consultant in DTS Solution supporting our 800-HACKED program<br> </li>
 <li>
<i> </i> 
 Work as a consultant for many Incident Retainer Program<br> </li>
 <li>
<i> </i> 
 Cyber breach investigations including forensic and malware analysis. Identifies network computer intrusion evidence and perpetrators.<br> </li>
 <li>
<i> </i> 
 Strong understanding on threat hunting methodologies.<br> </li>
 <li>
<i> </i> 
 Strong experience in post-compromise assessment.<br> </li>
 <li>
<i> </i> 
 Ability to perform detailed forensics investigations;<br> </li>
 <li>
<i> </i> 
 Knowledge on DFIR tools   Autospy, Encase, Access Data, FTK+, IDA etc.<br> </li>
 <li>
<i> </i> 
 Examines and performs comprehensive technical analysis of computer-related evidence and information stored on a device(s) during the conduct of an investigation or litigation.<br> </li>
 <li>
<i> </i> 
 Proactively advise teams/hunt for and research potential malicious activity and incidents across multiple platforms using advanced threat network and host-based tools.<br> </li>
 <li>
<i> </i> 
 Use both internal and external threat intelligence to build indicators of compromise into monitoring tools, can integrate these tools with one another to provide data enrichment.<br> </li>
 <li>
<i> </i> 
 Use strong TCP/IP networking skills to perform network analysis to isolate and diagnose potential threats and anomalous network behavior.<br> </li>
 <li>
<i> </i> 
 Ensures chain of custody and control procedures, documents procedures and findings in a manner suitable for courtroom presentation and prepares comprehensive written notes and reports.<br> </li>
 <li>
<i> </i> 
 Report common and repeated problems (trend analysis) to management and propose process and technical improvements.<br> </li>
 <li>
<i> </i> 
 Provide resolution plans for system and network issues.<br> </li>
 <li>
<i> </i> 
 Provide support in the detection, response, mitigation, and reporting of real or potential cyber threats to the environment and assist in the automation of the processes.<br> </li>
 <li>
<i> </i> 
 Provides oral and written communication to staff personnel concerning findings of fact, results of examination(s), and legal declarations, and testify in court as to the procedures and methodology used to recover and identify relevant evidence.<br> </li>
 <li>
<i> </i> 
 Ability to write Incident Response Reports in accordance to international standards.<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 6+ years of experience of network/security and analyzing digital evidence and investigate computer security incidents<br> </li>
 <li>
<i> </i> 
 Expert knowledge on DFIR tools such as Access Data, IDA Pro, FTK+, Encase<br> </li>
 <li>
<i> </i> 
 Expert knowledge on threat hunting tools   commercial and open source<br> </li>
 <li>
<i> </i> 
 Familiarity with network tools such as Wireshark, tcpdump, libpcap.<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 GCIA, GCIH, or CISSP Certifications<br> </li>
 <li>
<i> </i> 
 SANS Certified Forensic Examiner (GCFE)<br> </li>
 <li>
<i> </i> 
 Forensic/ Incident Response Professional<br> </li>
 <li>
<i> </i> 
 Industry Certification on Digital Forensics Tool<br> </li>
 </ul>
 </div>
 </div>
 
 
 <div>
 <div>
<div>
 <div>
 <div>
 <div>
 <div><br></div></div><div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

Digital Forensics and Incident Response Consultant

Binance

<div>
 <div>
  <b>Responsibilities</b>
  <ul>
   <li>Design, deploy, and optimize DLP solutions across network, endpoint, and cloud.</li>
   <li>Build and refine data classification schemes for sensitive assets (wallets, trading algorithms, customer PII).</li>
   <li>Configure DLP policies to prevent data exfiltration while minimizing false positives.</li>
   <li>Monitor, analyze, and tune alerts and incidents for continuous improvement.</li>
   <li>Lead investigations of DLP incidents and insider threats,</li>
   <li>Conduct threat hunting and forensic analysis of data exfiltration attempts.</li>
   <li>Integrate DLP monitoring into broader SOC workflows and incident response playbooks.</li>
   <li>Build custom DLP tools and integrations (e.g., macOS Swift endpoint protection, Unix socket monitoring).</li>
   <li>Develop automation scripts, APIs, regexes and integrations to enhance detection and response.</li>
   <li>Explore AI/LLM-driven methods for anomaly detection and response efficiency.</li>
   <li>Ensure controls align with crypto and financial regulations (AML, KYC, GDPR, CCPA).</li>
   <li>Support audits and regulatory reviews related to data protection.</li>
   <li>Assess and mitigate data loss risks across trading platforms, onboarding systems, and blockchain infrastructure.</li>
  </ul>
 </div>
</div>

DLP & Incident Response Engineer

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Work as a Cyber Threat Intel Analyst in DTS Solution   HawkEye CSOC cyber command center.<br> </li>
 <li>
<i> </i> 
 Analyze and research known indicators, correlate events, identify malicious activity, and discover new sources to provide early warning related to a variety of Cyber threats.<br> </li>
 <li>
<i> </i> 
 Monitor Open Source information feeds and threat actor activity to identify activity levels and indicators for Cyber threats and Cyber-attacks.<br> </li>
 <li>
<i> </i> 
 Identify Open Source Intelligence (OSINT) threats relevant to the DTS Solution - HawkEye CSOC customer s environment and develop relevant reports.<br> </li>
 <li>
<i> </i> 
 Provide daily (business day) collections, reviews, analysis and filtering of Open Source Intelligence (OSINT) and SOCMINT (Social Media Intelligence)<br> </li>
 <li>
<i> </i> 
 Identify and investigate malicious actors with the interest and capability to target client and its infrastructure.<br> </li>
 <li>
<i> </i> 
 Develop and provide a Cyber Threat Intelligence Report, Monthly Report and Quarterly Report and an Annual Report.<br> </li>
 <li>
<i> </i> 
 Reviews all current threat intelligence feeds in use, categorizes and prioritizes by relevancy.<br> </li>
 <li>
<i> </i> 
 Provide proactive APT hunting, incident response support, and advanced analytic capabilities.<br> </li>
 <li>
<i> </i> 
 Analyze threat information reports and intelligence summaries, trends, gaps, and methods of operation.<br> </li>
 <li>
<i> </i> 
 Review audit logs and identify any unusual or suspect behavior.<br> </li>
 <li>
<i> </i> 
 Initiates ad-hoc threat intelligence work parcel assignments for Tier I/II analysts and reviews/expands the SOC daily recurring activity SOP s.<br> </li>
 <li>
<i> </i> 
 Develops reports that can be sent for awareness to various groups and levels of leadership.<br> </li>
 <li>
<i> </i> 
 Engage constructively in cross-functional projects designed to improve DTS Solution - HawkEye CSOC and its customers  security postures.<br> </li>
 <li>
<i> </i> 
 Understanding of geo-political dynamics and how they affect the wider cyber threat landscape.<br> </li>
 <li>
<i> </i> 
 Experience using Cyber Kill Chain.<br> </li>
 <li>
<i> </i> 
 Expertise on in using Threat Intelligence Platforms (Recorded Future, Flashpoint, Blueliv, Anomali, ThreatIQ etc.)<br> </li>
 <li>
<i> </i> 
 Expertise in using Digital Risk Management platforms that looks for dark web activities, breaches,<br> </li>
 <li>
<i> </i> 
 Have a curated list of important threat intel fusion across various sources<br> </li>
 <li>
<i> </i> 
 Knowledge on dark web and accessing dark web forums, IRCs, chat groups etc.<br> </li>
 <li>
<i> </i> 
 Knowledge on APT groups and monitoring all activities through handlers<br> </li>
 <li>
<i> </i> 
 Curate newsletter and social media weekly posts based on weekly activities in the cyberspace.<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 4+ years of experience on extract and disseminate open source intelligence (OSINT)<br> </li>
 <li>
<i> </i> 
 Regional expertise as applied to threat actors<br> </li>
 <li>
<i> </i> 
 Familiarity with alternative analysis techniques and predictive analysis methodology<br> </li>
 <li>
<i> </i> 
 Experience with conducting intelligence investigations and familiarity with investigative tools, including Maltego, DomainTools, and VirusTotal<br> </li>
 <li>
<i> </i> 
 Familiarity with Threat Rating Methodology<br> </li>
 <li>
<i> </i> 
 Experience using Threat Intelligence Platforms (TIPs)<br> </li>
 <li>
<i> </i> 
 Active memberships with associations across the security and intelligence community<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Certified Ethical Hacker (CEH)<br> </li>
 <li>
<i> </i> 
 SANS Certified Intrusion Analyst (GCIA)<br> </li>
 <li><br></li></ul></div></div><div><div><div><div><div><div><div> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

Cyber Threat Intelligence Analyst

Commercial Bank of Dubai

<p><br></p> <p> <strong>Job Purpose </strong> </p> <p>Lead CBD's security operations and manage incident response efforts. This role is critical in supporting the CISO office and ensuring the security and resilience of our IT infrastructure and protecting our bank's data and systems from cyber threats.</p> <p> <br> </p> <p> <strong>Principle Accountabilities </strong> </p> <p> <br> </p> <ul> <li>Oversee the daily operations of the Security Operations Center (SOC) working across 1LoD &amp; 2LoD security teams.</li> <li>Develop and implement security monitoring and incident detection strategies.</li> <li>Ensure the effective use of security tools and technologies to protect the bank's assets.</li> <li>Monitor security alerts and manage the response to potential security incidents.</li> <li>Support the CISO office Conduct regular security assessments and audits to identify vulnerabilities.</li> <li>Own the incident response plan to address security breaches and incidents.</li> <li>Lead the incident response team in investigating and resolving security incidents. (24/7 rota with leadership team)</li> <li>Coordinate with internal and external stakeholders during incident response activities.</li> <li>Conduct post-incident reviews and implement lessons learned to improve security measures.</li> <li>Ensure timely and accurate reporting of security incidents to relevant authorities and stakeholders.</li> <li>Develop and maintain a threat intelligence program to identify and analyze emerging threats.</li> <li>Collect, analyze, and disseminate threat intelligence to relevant stakeholders.</li> <li>Collaborate with external threat intelligence providers and industry peers to stay informed about the latest threats.</li> <li>Integrate threat intelligence into security operations and incident response processes.</li> <li>Provide actionable intelligence to enhance the bank's security posture and mitigate risks.</li> <li>Support risk assessments and vulnerability analysis to identify potential threats (ISMS/Projects/Change/Thematic).</li> <li>Support threat modelling as part of DevSecOps and other change activity.</li> </ul>", "order": 1}, {

Senior Manager, Security Operations & Incident Management

Explore 100+ Threat hunter in Dubai this November. Find roles across top companies and apply now to boost your career.

100 threat hunter jobs IN Dubai

Security Analyst

Security Analyst

Cyber Security Engineer

Digital Forensics and Incident Response Consultant

DLP & Incident Response Engineer

Cyber Threat Intelligence Analyst

Senior Manager, Security Operations & Incident Management