threat hunting engineer

NKU Technologies Pvt.Ltd.

We are hiring a Cybersecurity Engineer. This role is ideal for someone with hands-on technical skills who is looking to grow in offensive security while gaining exposure to client-facing engagements. Key Responsibilities:<ul><li>Perform penetration testing on web applications, APIs, and network environments</li><li>Conduct vulnerability assessments using automated tools and validate findings manually</li><li>Support red team or adversary simulation exercises as part of a team</li><li>Perform basic threat hunting activities by analyzing logs and identifying suspicious behaviour</li><li>Assist in identifying indicators of compromise (IOCs) and potential security threats</li><li>Support monitoring of external sources such as forums and online platforms for potential data leaks</li><li>Document findings and prepare clear, structured technical reports</li><li>Participate in re-testing activities to validate remediation efforts</li><li>Stay updated with the latest security vulnerabilities, tools, and techniques</li><li>Ensure all testing activities comply with legal, regulatory, and contractual requirements.</li></ul>Required Qualifications:<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Security, IT, Computer Science, or a related field</li><li>3&ndash;4 years of hands-on experience in offensive security e.g. penetration testing, vulnerability assessment and exposure with threat hunting and dark web monitoring.</li><li>Strong understanding of web security, network security, and application security concepts</li><li>Hands-on experience with tools such as Burp Suite, Metasploit, Nmap, Nessus, and Wireshark</li><li>Hands-on experience with OWASP Top 10, MITRE ATT&amp;CK, and CVSS scoring</li><li>Strong understanding of threat intelligence and OSINT techniques</li><li>Strong analytical and investigative mindset</li><li>Excellent client communication and presentation skills</li><li>Strong documentation and reporting capabilities</li><li>Ability to work independently with guidance from senior team members</li></ul>Preferred Certifications<ul><li>CEH (Certified Ethical Hacker)</li><li>OSCP (Offensive Security Certified Professional) or working towards it</li><li>CRTP</li></ul>Nice to Have<ul><li>knowledge of cloud platforms (AWS, Azure, GCP)</li><li>Scripting skills (Python, Bash, or PowerShell)</li><li>Exposure to SIEM or security monitoring tools</li></ul>Pay: From Rs120,000.00 per monthWork Location: In person

Offensive Security Engineer

cFocus Software Incorporated

<div><h1 class="jobSectionHeader">Cyber Threat Intelligence Analyst Job Description</h1>
Position: Cyber Threat Intelligence Analyst 
Program: SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader">
Position Summary</h2>
The Cyber Threat Intelligence Analyst supports the Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program by delivering advanced cyber threat intelligence, threat analysis, proactive threat hunting, and operational cybersecurity support services. 
The Cyber Threat Intelligence Analyst is responsible for collecting, analyzing, correlating, and disseminating actionable cyber threat intelligence to support the SBA Security Operations Center (SOC), cybersecurity operations, incident response activities, and enterprise risk mitigation efforts. The position supports 24x7x365 cybersecurity operations through advanced analysis of indicators of compromise (IOCs), adversary tactics, techniques, and procedures (TTPs), emerging vulnerabilities, and threat actor activity impacting federal information systems and cloud environments.<h2 class="jobSectionHeader">
Essential Duties and Responsibilities</h2><ul><li>
Provide cyber threat intelligence and operational analysis support for the SBA SOC in support of Task Area 3.5.3 Cybersecurity Operations Support.</li><li>
Conduct proactive cyber threat hunting activities across enterprise systems, cloud environments, endpoints, and network infrastructure.</li><li>
Analyze indicators of compromise (IOCs), threat actor tactics, techniques, and procedures (TTPs), malware behaviors, and emerging cyber threats.</li><li>
Monitor and evaluate cyber threat intelligence feeds, vendor reporting, CISA advisories, US-CERT alerts, and external intelligence sources.</li><li>
Perform advanced correlation and analysis of security events, SIEM data, IDS/IPS alerts, EDR telemetry, DNS logs, firewall logs, and network traffic.</li><li>
Support incident response and cybersecurity investigations through intelligence-driven analysis and threat attribution support.</li><li>
Develop cyber threat intelligence reports, operational briefings, situational awareness products, and executive-level summaries.</li><li>
Assist with the identification of previously unknown attack vectors and suspicious activity through threat hunting and anomaly analysis.</li><li>
Support digital forensics and incident analysis activities in coordination with SOC analysts, engineers, and incident responders.</li><li>
Develop and maintain threat intelligence playbooks, threat models, attack scenarios, and adversary profiles.</li><li>
Perform analysis of cloud security events and cyber threats impacting Microsoft 365, Azure, AWS, Salesforce, and hybrid cloud environments.</li><li>
Conduct research on advanced persistent threats (APTs), ransomware groups, insider threats, nation-state actors, and emerging cyber attack trends.</li><li>
Provide recommendations for defensive countermeasures, detection logic improvements, and enhanced security monitoring capabilities.</li><li>
Assist in the development of threat signatures, SIEM use cases, detection analytics, and threat detection content.</li><li>
Support continuous improvement of cybersecurity operations, threat intelligence workflows, and incident response processes.</li><li>
Coordinate with federal stakeholders, law enforcement, privacy officials, insider threat teams, and mission partners during cyber incident activities.</li><li>
Document investigative findings, intelligence assessments, and operational actions within case management and reporting systems.</li><li>
Participate in SOC operational meetings, shift briefings, incident coordination calls, and cybersecurity readiness activities.</li><li>
Maintain awareness of evolving cybersecurity technologies, federal threat reporting requirements, and NIST cybersecurity guidance.</li><li>
Support cybersecurity communications, intelligence sharing, and collaboration activities across the SBA enterprise.</li></ul><h2 class="jobSectionHeader">
Minimum Qualifications</h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Technology, Intelligence Studies, Information Assurance, or related discipline. Relevant experience may substitute for degree requirements.</li><li>
Minimum of 5 years of experience supporting cybersecurity operations, cyber threat intelligence, threat hunting, incident response, or SOC operations.</li><li>
Experience analyzing threat intelligence, indicators of compromise, adversary TTPs, and cybersecurity attack methodologies.</li><li>
Hands-on experience with SIEM, EDR, IDS/IPS, network analysis, and cyber defense tools.</li><li>
Experience conducting threat hunting and advanced event correlation across enterprise environments.</li><li>
Knowledge of federal cybersecurity frameworks and guidance including NIST SP 800-61, NIST SP 800-53, and CISA operational guidance.</li><li>
Understanding of MITRE ATT&amp;CK framework and cyber kill chain methodologies.</li><li>
Experience with cloud security monitoring and threat analysis in Microsoft Azure, AWS, Microsoft 365, and hybrid environments.</li><li>
Strong analytical, investigative, communication, and reporting skills.</li><li>
Ability to support 24x7x365 cybersecurity operational environments.</li></ul><h2 class="jobSectionHeader">
Preferred Certifications</h2><ul><li>
GIAC Cyber Threat Intelligence (GCTI)</li><li>
GIAC Certified Incident Handler (GCIH)</li><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
Certified Information Systems Security Professional (CISSP)</li><li>
CompTIA CySA+</li><li>
Certified Ethical Hacker (CEH)</li><li>
Splunk Enterprise Security Certified Admin</li><li>
Microsoft Security Operations Analyst Associate (SC-200)</li></ul>
Pw75tUj9Bf</div>

SBA - Cyber Threat Intelligence Analyst

Peraton

<div><div><h5 class="jobSectionHeader">ABOUT PERATON</h5>
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world&rsquo;s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we&rsquo;re keeping people around the world safe and secure.</div><div><h5 class="jobSectionHeader">
ABOUT THE ROLE</h5><div><div>
We are seeking a highly skilled and innovative Threat Hunter to join our team in the greater DMV area, supporting the Army National Guard.</div><div></div><div> 
Responsibilities</div><ul><li>
Lead proactive threat‑hunting operations: develop hypotheses, analytic campaigns, and hunting workflows to detect sophisticated adversary behaviors across networks, endpoints, cloud, and OT/DCI systems.</li><li>
Build behavioral detection logic, long‑term analytic patterns, and anomaly models mapped to MITRE ATT&amp;CK TTPs.</li><li>
Leverage threat intelligence, incident trends, CDAP findings, and vulnerability data to prioritize high‑risk hunt objectives and scope.</li><li>
Conduct deep forensic and telemetry analysis to uncover lateral movement, persistence mechanisms, credential misuse, and stealthy C2 activity.</li><li>
Develop hunt playbooks, repeatable methodologies, and validation procedures to elevate enterprise hunting maturity.</li><li>
Integrate hunting outputs into SOC, CIRT, RCC‑ARNG, NETCOM, and ARCYBER operations by delivering actionable detections, validated indicators, and threat behavior insights.</li><li>
Collaborate with detection engineering to convert hunt findings into high‑fidelity detections, tune SIEM/EDR rules, and expand telemetry coverage.</li><li>
Produce detailed technical reports, intelligence briefs, and executive summaries to inform remediation, detection priorities, and strategic risk decisions.</li><li>
Drive continuous improvement: identify telemetry gaps, enhance data‑enrichment pipelines, automate analytic processes, and evaluate emergent hunting tools and techniques.</li></ul><div>
#ENOCS</div></div></div><div></div><div><h5 class="jobSectionHeader"> 
QUALIFICATIONS</h5><div><div>
Qualifications</div><ul><li>
Minimum of 8 years with BS/BA; Minimum of 6 years with MS/MA; Minimum of 3 years with PhD</li><li><div>
Clearance: Active TS/SCI clearance.</div></li><li><div>
Candidate must meet ONE of the following:</div><ul><li>
Master&rsquo;s degree or Ph.D. in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, Software Engineering, or a related field; OR</li><li>
Relevant DoD/military training (examples: 4‑11‑C32‑255S (CP); 4C‑255N (CP); 4C‑255A (CP); M0923W1; A‑531‑4417; Cyber Defense Analyst (Advanced) Playlist); OR</li><li>
Relevant professional certification or equivalent experience (examples: CBROPS; CFR; CySA+; GCFA; GCIA; GICSP).</li></ul></li><li><div>
Required experience and skills:</div><ul><li>
Cyber threat analysis, hunting, or advanced detection experience with at least 3 years leading hunt operations or detection programs in enterprise or DoD contexts.</li><li>
Deep expertise in telemetry analytics, log forensics, memory/disk analysis, and threat‑hunting toolchains (SIEM, EDR, network forensics).</li><li>
Proven ability to author hunt hypotheses, design validation tests, and operationalize findings into detection engineering and incident response workflows.</li><li>
Strong familiarity with MITRE ATT&amp;CK, threat‑intelligence integration, adversary emulation, and validation methodologies.</li><li>
Excellent technical writing and briefing skills for producing reproducible hunt artifacts, IOC packages, and executive‑level intelligence products.</li></ul></li><li><div>
Desired:</div><ul><li>
Prior DoD/ARNG threat‑hunting or CDAP experience and experience coordinating with ARCYBER/NETCOM/RCC‑ARNG.</li><li>
Experience with automation of hunting workflows, advanced analytics (ML/behavioral models), and large‑scale telemetry platforms.</li></ul></li></ul><div>
#ENOCS</div></div></div><div><h5 class="jobSectionHeader">
DETAILS</h5><div>
Target Salary Range: $104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual&rsquo;s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
</div><div>
Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
</div><div>
Application Statements: The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity.
</div>
EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</div></div><div></div>

THREAT HUNTER

Architecture In Motion

<div>Job Title: SOC Analyst &ndash; Level 2

Location: Pakistan (Remote)

Employment Type: Full-time

Work Model: Remote (24/7 Shift Rotation) 
About Us:

Arancia is a Canadian Cybersecurity Consulting, Advisory and Technology firm based in Mississauga, Ontario. Our team consists of geographically diverse professionals dedicated to solving complex cybersecurity challenges.

Offering a robust set of services across the IT and Cybersecurity landscape, supported by our proprietary security platform DarkSense, Arancia delivers high-quality security solutions across industries such as Healthcare, Financial Services, and Critical Infrastructure to a global client base.

Operating a modern 24/7 Security Operations Center, we combine advanced tooling with an evolving Agentic SOC platform to reduce noise, improve detection quality, and enable analysts to focus on meaningful investigations.

If you are interested in working in a fast-paced, growing cybersecurity environment with a strong focus on innovation, investigation quality, and operational excellence, this role is for you. 
Job Summary:

We are seeking a skilled and highly motivated SOC Analyst &ndash; Level 2 to join our Security Operations team. This role is ideal for someone with hands-on experience in SOC operations, threat investigation, and incident response.

As an L2 SOC Analyst, you will take ownership of advanced triage and investigation of alerts escalated from L1, execute containment actions across customer environments, and drive detection quality through structured tuning and feedback loops.

You will work closely with L1 analysts, Detection Engineering, Incident Response, and Threat Intelligence teams, as well as our Agentic SOC platform, to reduce dwell time and false positives. During evening shifts, you will also transition into proactive threat hunting, using dedicated time blocks to identify detection gaps and improve coverage.

This role serves as a direct progression pathway into L3, Threat Hunting, Detection Engineering, or Incident Response. 
Key Responsibilities:
<ul>
<li>Alert Triage &amp; Investigation:</li>
</ul>
Perform advanced triage of alerts escalated from L1, determining true vs false positives. Investigate security events across endpoint, identity, network, and cloud telemetry. Correlate events and map adversary behavior to MITRE ATT&amp;CK while enriching findings with relevant threat intelligence context.
<ul>
<li>Incident Response Execution:</li>
</ul>
Execute or coordinate containment actions including host isolation (EDR), account disablement (Entra ID / IAM), and blocking indicators such as IPs, domains, or hashes. Partner with Incident Response teams on high-severity or multi-system incidents and document actions, timelines, and evidence with a clear chain of reasoning.
<ul>
<li>Threat Hunting:</li>
</ul>
Conduct hypothesis-driven threat hunting across endpoint, identity, and cloud datasets, particularly during evening shifts and on rotation. Convert hunt findings into new detections or tuning recommendations and maintain proper documentation of hunts and derived detections.
<ul>
<li>Detection Quality &amp; Tuning:</li>
</ul>
Provide structured feedback to Detection Engineering on false positives, detection gaps, and tuning opportunities. Validate new detection rules (Sigma, KQL, SPL, or equivalent) before production rollout and contribute to playbook authoring and continuous improvement.
<ul>
<li>Case Management &amp; Reporting:</li>
</ul>
Produce clear, complete incident reports suitable for both technical and non-technical stakeholders. Track and support SLA metrics including MTTD, MTTR, and MTTC. Participate in structured shift handovers and post-incident reviews.
<ul>
<li>Collaboration &amp; Cross-Functional Teamwork:</li>
</ul>
Collaborate closely with internal teams including Detection Engineering, Incident Response, and Threat Intelligence. Mentor L1 analysts on triage quality and investigation techniques, and contribute to internal knowledge bases and lessons-learned sessions. 
Qualifications:
<ul>
<li>Experience:</li>
</ul>
2&ndash;5 years of experience in a SOC, Incident Response, or equivalent hands-on blue team role. Demonstrable experience handling real security incidents end-to-end with a strong understanding of SOC workflows, escalation paths, and on-shift discipline.
<ul>
<li>Industry Knowledge:</li>
</ul>
Strong understanding of cybersecurity concepts including endpoint, network, identity, and cloud security. Solid grounding in MITRE ATT&amp;CK and its operational application in investigations.
<ul>
<li>Technical Skills:</li>
</ul>
Hands-on experience with at least one modern SIEM (Microsoft Sentinel, Elastic SIEM, OpenSearch, or similar) and at least one EDR solution (Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, or similar). Working knowledge of identity and cloud telemetry (Entra ID, Office 365, AWS/Azure logs). Proficiency in KQL is required; additional query languages such as SPL or OpenSearch DQL are a plus. Basic scripting in Python or PowerShell for automation and enrichment.
<ul>
<li>Analytical &amp; Soft Skills:</li>
</ul>
Strong investigative mindset with the ability to pivot across data sources and build timelines. Clear written communication suitable for customer-facing reports. Ability to remain calm under pressure during live incidents and shift transitions. Team-oriented with a willingness to mentor and continuously learn.
<ul>
<li>Education:</li>
</ul>
Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent practical experience).
<ul>
<li>Certifications:</li>
</ul>
Certifications such as BTL1, CySA+, GCIH, Microsoft SC-200, or CompTIA Security+ are considered a plus. 
Nice to Have:

Exposure to SOAR platforms (Cortex XSOAR, Shuffle, Tines), threat intelligence platforms (MISP, OpenCTI), malware analysis or sandboxing tools (Any.Run, Joe Sandbox, Cuckoo), network detection tools (Zeek, Suricata), and cloud security experience across Azure, AWS, or GCP. 
Shift Details:

This role operates on a 24/7 rotating schedule including day, evening, and night shifts. Evening shifts follow a hybrid structure combining live queue work with scheduled threat hunting blocks. Structured handovers are conducted at every shift change to ensure continuity on active incidents. Shift allowances apply for evenings, nights, weekends, and public holidays. 
Onboarding (First 30 Days):
<ul>
<li>Days 1&ndash;15 &mdash; Shadowing: 
Pair with senior analysts across shifts to observe live investigations, understand playbooks, tooling, customer environments, and escalation thresholds. No production alert ownership during this phase.</li>
<li>Days 16&ndash;30 &mdash; Supervised Queue: 
Take ownership of alerts under direct supervision. All cases are reviewed with structured feedback on triage decisions, incident response actions, and reporting quality.</li>
<li>Day 30+ &mdash; Full Ownership: 
Independently manage the queue, continue shadowing complex incidents, and rotate into threat hunting responsibilities.</li></ul> 


What a Typical Shift Looks Like:

Start by reviewing handover notes, open incidents, and any ongoing hunts. Work through the escalation queue by triaging, investigating, containing, and documenting incidents. During evening shifts, execute scheduled hunts or deep-dive into complex investigations. End the shift by updating case notes, preparing a clear handover, and flagging detection tuning opportunities. 
Why Join Us:
<ul>
<li>Modern SOC stack and tooling</li>
<li>Agentic SOC platform enabling AI-assisted triage and investigations</li>
<li>Clear career progression into L3, Threat Hunting, Detection Engineering, or IR</li>
<li>Structured onboarding and continuous learning support</li>
<li>Investigation-led culture focused on quality over ticket volume</li></ul> 


Hours:

40 hours per week (shift-based schedule) 
Compensation:

Market competitive salary based on experience &amp; qualifications.</div>

SOC Analyst - Level 2

CrowdStrike

<div>As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn&rsquo;t changed &mdash; we&rsquo;re here to stop breaches, and we&rsquo;ve redefined modern security with the world&rsquo;s most advanced AI-native platform. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We&rsquo;re also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We&rsquo;re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.
About the Role:
CrowdStrike is looking for a highly motivated, self-driven, cloud threat hunter dedicated to making a difference in global security by protecting organizations against the most advanced adversaries in the world. Our CrowdStrike Professional Services team offers opportunities to expand your skill set through a wide variety of impactful consulting engagements for many of the world's leading organizations.
The Cloud Threat Hunting Principal Consultant will be responsible for conducting compromise assessments in cloud environments to identify active and historical threats, reviewing cloud control plane configurations, and providing actionable recommendations to enhance the security posture of customer cloud environments.
What You&rsquo;ll Do:<ul><li>
Drive hunting methodology improvements, including maturing existing capabilities, developing new service features, and cross-functional collaboration with product, IR, and data science.</li><li>
Develop queries, scripts, AI prompts, and dashboards to automate the hunting for and analysis of deterministic behaviors and IOAs.</li><li>
Build agentic workflows using orchestration frameworks to augment and automate data analysis and reporting tasks.</li><li>
Leverage analytics and threat intelligence to analyze cloud logs and control plane configurations to identify historical and active threats.</li><li>
Manage complex client complex engagements, lead internal teams, and provide regular status updates to clients regarding project status and findings.</li><li>
Produce high-quality written and verbal reports, presentations, recommendations, and findings to key stakeholders including customer management, regulators, and legal counsel.</li><li>
Demonstrate industry thought leadership through blog posts, CrowdCasts, and other public speaking events.</li></ul>
What You&rsquo;ll Need:
Successful candidates will have experience in one or more of the following areas:<ul><li>
A strong understanding of one or more of the following cloud platforms: AWS, Azure, or GCP, including identity, architecture, security, and logging.</li><li>
An understanding of Agentic AI and at least one orchestration framework.</li><li>
Strong analytical skills, attention to details, and ability to work with large data sets up to terabytes in size.</li><li>
At least 5 years of hands-on threat hunting experience in cloud and/or on-premises environments.</li><li>
Excellent communication skills, including a strong ability to communicate executive and/or detailed level findings to clients; ability to effectively communicate tasks, guidance, and methodology with internal teams.</li></ul>
Additionally, background in at least one of the following domains is required:<ul><li>
Threat Hunting: experience conducting, developing, or managing adversary threat hunting engagements, in either an internal security or consulting environment.</li><li>
Incident Response: experience conducting incident response investigations for organizations, investigating targeted threats such as the Advanced Persistent Threat (APT), Organized Crime, and Hacktivists.</li><li>
Threat Research: analyzing cloud threats, tracking attack campaigns, conducting vulnerability research, and developing attack techniques.</li><li>
Detection Engineering: creating and implementing detection logic in tools, testing detection against known threats, and managing detection content lifecycle.</li></ul>
Education &amp; Certifications:
BA or BS / MA or MS degree in Computer Science, Computer Engineering, Math, Information Security, Information Assurance, Information Security Management, Intelligence Studies, Cybersecurity, Cybersecurity Policy, or a related field. Applicants without a degree but with relevant work experience and/or training will be considered.
Holders of a CISSP, CISA, CISM, CCSP, or any practitioner or security certifications in AWS, Azure and GCP may be considered in lieu of or in addition to a degree.
#LI-AC1
#LI-Remote
This role may require the candidate to periodically undergo and pass alcohol and/or drug test(s) during the course of employment.
Benefits of Working at CrowdStrike:<ul><li>
Market leader in compensation and equity awards</li><li>
Comprehensive physical and mental wellness programs</li><li>
Competitive vacation and holidays for recharge</li><li>
Paid parental and adoption leaves</li><li>
Professional development opportunities for all employees regardless of level or role</li><li>
Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections</li><li>
Vibrant office culture with world class amenities</li><li>
Great Place to Work Certified&trade; across the globe</li></ul>
CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.
CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions-including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs-on valid job requirements.
If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at recruiting@crowdstrike.com for further assistance.
Find out more about your rights as an applicant.
CrowdStrike participates in the E-Verify program.
Notice of E-Verify Participation
Right to Work
CrowdStrike, Inc. is committed to fair and equitable compensation practices. Placement within the pay range is dependent on a variety of factors including, but not limited to, relevant work experience, skills, certifications, job level, supervisory status, and location. The base salary range for this position for all U.S. candidates is $140,000 - $195,000 per year, with eligibility for bonuses, equity grants and a comprehensive benefits package that includes health insurance, 401k and paid time off.
For detailed information about the U.S. benefits package, please click here.
Expected Close Date of Job Posting is:06-09-2026</div>

Cloud Threat Hunting Principal Consultant (Remote)

Qiddiya Investment Company

<div>Qiddiya Investment Company is seeking an experienced and strategic Manager - Cybersecurity Threat Management to lead our threat management initiatives. In this leadership role, you will be responsible for overseeing the detection, analysis, and mitigation of cybersecurity threats to safeguard the organization's critical information assets and infrastructure.
You will drive the development and execution of advanced threat intelligence programs and incident response strategies, collaborating with various teams to ensure a proactive and effective security posture.
Key Responsibilities<ul>
<li>Lead the cybersecurity threat management program, including threat intelligence collection, analysis, and dissemination.</li>
<li>Oversee incident detection and response activities, ensuring timely and effective handling of security incidents.</li>
<li>Develop and implement advanced threat hunting and mitigation strategies tailored to organizational risks and needs.</li>
<li>Collaborate with internal and external stakeholders to enhance threat intelligence sharing and coordination.</li>
<li>Manage and mentor the cybersecurity threat management team, fostering skill development and knowledge sharing.</li>
<li>Prepare and present threat intelligence reports and risk assessments to senior leadership and stakeholders.</li>
<li>Stay abreast of emerging threats, tactics, and technologies, integrating new knowledge into threat management processes.</li>
<li>Ensure compliance with relevant cybersecurity standards, policies, and regulations.</li> 
</ul> 
 
Requirements 
<ul>
<li>Bachelor's degree in Cybersecurity, Information Technology, or a related field.</li>
<li>6+ years of experience in cybersecurity threat management, incident response, or related fields.</li>
<li>Deep understanding of threat intelligence frameworks, security operations, and incident response methodologies.</li>
<li>Proven leadership and team management experience.</li>
<li>Familiarity with advanced threat detection tools and technologies.</li>
<li>Excellent analytical, communication, and interpersonal skills.</li>
<li>Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Threat Intelligence Analyst (CTIA), or GIAC Certified Incident Handler (GCIH) are highly desirable.</li> 
</ul> 
 
Benefits 
Comprehensive benefits package</div>

Manager - Cybersecurity Threat Management

Al Adyat consultancy

Role OverviewOwns end-to-end delivery of threat intelligence onboarding and integration using Anomali, including architecture, data ingestion, enrichment, correlation, and integration with Splunk SIEM and Splunk SOAR to enhance detection, investigation, and automated response capabilities.Key Responsibilities&middot; Lead solution architecture and detailed design (HLD / LLD) for threat intelligence integration&middot; Deploy, configure, and optimize Anomali Threat Intelligence Platform&middot; Onboard threat intelligence feeds and manage lifecycle, scoring, and confidence tuning&middot; Integrate Anomali with Splunk SIEM for enrichment, correlation, and detection enhancement&middot; Integrate threat intelligence into Splunk SOAR playbooks for automated response&middot; Implement use cases aligned to SOC investigation and threat hunting workflows&middot; Validate data quality, mappings, and enrichment effectiveness&middot; Troubleshoot integration, data, and performance issues&middot; Produce operational documentation and conduct knowledge transfer to run teams&middot; Support stabilization and transition into BAU operationsSkills and Experience&middot; Strong hands-on experience with Anomali Threat Intelligence Platform&middot; Experience integrating threat intelligence with Splunk SIEM and Splunk SOAR&middot; Strong understanding of threat intelligence lifecycle, IOC management, and enrichment&middot; Knowledge of SOC operations, threat detection, and incident response&middot; Experience producing technical design and operational handover documentationKey Deliverables&middot; Threat intelligence architecture and integration design documentation&middot; Configured Anomali TIP integrated with Splunk SIEM and SOAR&middot; Enrichment and correlation use cases implemented&middot; Runbooks, SOPs, and formal handover to operationsPay: QAR12,000.00 - QAR14,000.00 per monthEducation:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>Anomali Threat Intelligence Platform: 3 years (Required)</li><li>Splunk SIEM and Splunk SOAR: 3 years (Required)</li></ul>Language:<ul><li>Arabic (Required)</li><li>English (Required)</li></ul>License/Certification:<ul><li>degree in computer science (Required)</li></ul>Location:<ul><li>Doha (Required)</li></ul>Work Location: In person

Threat Intelligence Specialist (Anomali / Splunk)

Search 3845+ Threat hunting engineer jobs near you this May. New roles added regularly across leading industries. Apply today.