threat intelligence analyst

Google

<div>This position requires onsite client-facing work 4 days a week.<br>
Note: Google's hybrid workplace includes remote and in-office roles. By applying to this position you will have an opportunity to share your preferred working location from the following:<br>
<br>
<b>In-office locations: Dubai - United Arab Emirates.</b><br>
<b>Remote location(s): United Arab Emirates.</b><h3 class="jobSectionHeader"><b>
Minimum qualifications:</b></h3><ul>
<li>Bachelor's degree or equivalent practical experience.</li>
<li>5 years of experience in a customer-facing investigative role in cyber security (e.g., network forensics analyst, threat intelligence analyst).</li>
<li>Experience with project management.<br>
</li>
<li>Experience engaging with, and presenting to, technical stakeholders and executive leaders.<br>
</li>
<li>Ability to communicate in Arabic fluently as this is a customer-facing role that requires interactions in Arabic with local stakeholders.</li></ul><br>
<h3 class="jobSectionHeader"><b>
Preferred qualifications:</b></h3><ul>
<li>Experience working in a government or military environment, leveraging and developing CTI for network, host and log analysis, to enable the detection and response to cyber threats.</li>
<li>Experience in leveraging CTI to describe, track and develop new intelligence on advanced persistent threats.</li>
<li>Experience in conducting or supporting incident response and investigations within enterprise environments.</li>
<li>Experience in SOC operations, threat hunting, detection engineering and SOC workflow optimization.<br>
</li>
<li>Experience in network intrusion detection system monitoring, endpoint detection and response solutions, SIEM, security orchestration, automation, and response integration, and managing and contributing cyber threat intelligence into a threat intelligence platform.</li>
</ul><div><h2 class="jobSectionHeader"><b>About the job</b></h2><p>
Mandiant is a recognized leader in cyber security expertise and has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone. This role supports Mandiant&rsquo;s Advanced Intelligence Access (AIA) program. The AIA program enables customers, via an onsite cyber analyst, access to the totality of Mandiant&rsquo;s threat intelligence, including raw data. In this role, you will ensure the delivery of actionable intelligence to each customer&rsquo;s security or operational environments in order to drive decision making and action. You will also act as a conduit to Mandiant&rsquo;s extensive network of cyber security, threat intelligence, and information operations professionals.
</p></div><div><h2 class="jobSectionHeader"><b>Responsibilities</b></h2><ul>
<li>Evaluate tools and best practices for tracking advanced threats, Tools, Techniques, and Procedures (TTPs) of attacker&rsquo;s motivations, and industry and attacker trends.<br>
</li>
<li>Perform strategic, tactical, and operational research and analysis of adversarial cyber threats.<br>
</li>
<li>Correlate intelligence to develop understandings of tracked threat activity.<br>
</li>
<li>Present tactical and strategic intelligence about threat groups, methodologies they use, and the motivations behind their activity and convey the importance of findings to a variety of audiences.<br>
</li>
<li>Work with customers to determine their intelligence needs and requirements and prepare and deliver briefings and reports to the customers executives, security team, and analysts.<br>
</li>
</ul></div>Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.</div>

Principal Intelligence Analyst, Mandiant Intelligence (Arabic)

MAERSK

<p></p><div><p><b>Data Scientist &ndash; Cyber Threat Intelligence
</b></p><p></p><p>Joining Maersk will embark you on a great journey with career development in a global organisation.
</p><p>You will be exposed to a wide and challenging range of business issues through regular engagement with key stakeholders across all management levels within Maersk. You will work and communicate across geographical and cultural borders that will enable you to build a strong professional network. We believe people thrive when they are in charge of their career paths and professional growth. We will provide you with opportunities to broaden your knowledge and strengthen your technical and professional foundation.
</p><p>By choosing Maersk, you join not only for the role, but for a career. From here your path may take you towards extended responsibilities within A.P. Moller &ndash; Maersk.
</p><p>We aim to be a world-class professional IT organisation that delivers business value through automation, standardisation and innovation. We believe in empowerment where each of us takes ownership and responsibility for developing and implementing new ways of working.
</p><p>At Maersk we value the diversity of our talent and will always strive to recruit the best person for the job &ndash; we value diversity in all its forms, including but not limited to: gender, age, nationality, race, sexual orientation, disability or religious beliefs. We are proud of our diversity and see it as a genuine source of strength for building high performing teams.
</p><p>Role Purpose:
</p><p>As a Data Scientist in the Cyber Operations department, your primary role will be to turn data into actionable insights, leveraging tools, statistical models, AI and Machine Learning to enable data-driven decision-making. As part of this, you will also contribute to the design and delivery of data engineering and integrations capabilities that enable Cyber Operations to automate workflows and generate intelligence from security data at scale.
</p><p>You will report to the Head of Cyber Threat Intelligence (CTI), working alongside other CTI Analysts and Data Scientists, as a Subject Matter Expert (SME), working closely with other Cyber Security teams. You will be accountable for the effective collection, processing and analysis of large datasets to generate informative and actionable insights.
</p><p>This is a unique opportunity to provide input into the future direction and operation of the CTI function within Maersk, including the Cyber Operations department&rsquo;s AI strategy.
</p><p></p><p>Key Responsibilities:
</p><ul><li>Accountable for the effective collection, processing and analysis of large datasets to generate informative and actionable insights.
</li><li>Identify patterns, trends, and anomalies in security tooling, leveraging AI and data science techniques to inform decision‑making.
</li><li>Host, manage and interrogate databases to deliver automated and ad hoc reporting requests on security data.
</li><li>Develop and refine causal inference, predictive, statistical and machine learning models to enable threat detection and intelligence generation.
</li><li>Produce daily visual management dashboards using real‑time data, enabling cross‑team collaboration and swift identification of issues and focus areas.
</li><li>Facilitate performance tracking of People, Processes and Technologies against KPIs to drive continuous improvement and operational reporting.
</li><li>Disseminate curated data via secure APIs and MCP servers, and present work products in the stakeholder&rsquo;s desired format, ensuring access is controlled by least privilege.
</li><li>Scope and respond to Requests for Information (RFIs) from stakeholders by providing timely data and analysis outputs.
</li><li>Responsible for developing, maintaining and enhancing the use of LLMs for Cyber Security use cases.
</li><li>Enhance threat intelligence capabilities by developing processes where automation and AI‑assisted analysis can improve efficiency.
</li><li>Accelerate automation and enable safe AI/GenAI adoption via secure data access and tool integrations that support agile workflows.
</li><li>Build and maintain data ingestion pipelines and connectors for internal and external cyber data sources (API-first, using MCP where available).
</li><li>Normalise, enrich and curate cyber security datasets, maintaining provenance (source, timestamp, confidence/quality indicators where available) to support trusted decision‑making.
</li><li>Implement engineering quality practices for pipelines and services, and document/maintain processes.
</li></ul><p></p><p>Relevant Services: Cyber Threat Intelligence
</p><ul><li>Senior Cyber Leadership Team
</li><li>Head of Security Operations Centre
</li><li>Team of SOC Analysts
</li><li>Threat Hunting
</li><li>Red Team
</li><li>Cyber Defence Engineering
</li><li>Identity &amp; Access Management
</li><li>Strategy Owners
</li><li>Cyber Risk Team
</li><li>Cyber Security Officers
</li><li>Wider Maersk Organisation
</li></ul><p></p><p>Primary Stakeholders: External Cyber Threat Intelligence source providers
</p><p></p><p><b>Required Skills &amp; Experience:
</b></p><p></p><p><b>Professional qualifications:
</b></p><ul><li>Bachelor&rsquo;s degree in computer science, Engineering, Mathematics, Statistics, Data Science, or a related discipline (or an equivalent qualification).
</li><li>Certification or formal training in analytics engineering or data modelling (e.g. dimensional modelling, metrics design, data quality).
</li><li>Cloud certification or training in AWS or equivalent platforms, such as AWS Certified Data Engineer &ndash; Associate and/or AWS Certified Developer &ndash; Associate (or equivalent).
</li><li>Certification or formal training in Applied AI or Generative AI fundamentals.
</li><li>Cyber security or threat intelligence training is beneficial but not essential.
</li><li>Security certifications such as CEH, OSCP, SANS, or equivalent are desirable but not essential.
</li></ul><p></p><p><b>Technical skills &amp; knowledge:
</b></p><ul><li>Proficient in writing complex SQL queries for repeatable operational analytics and reporting.
</li><li>Proficient in applied Data Science / Machine Learning using Python, TypeScript/Node.js, or similar languages.
</li><li>Solid understanding of Forecasting process and algorithms and causality.
</li><li>Proficient in data visualization tools and techniques to effectively deliver complex findings.
</li><li>Solid cloud fundamentals, preferably with AWS (e.g., S3, Lambda, Glue, Step Functions, API Gateway, CloudWatch, or equivalent services).
</li><li>Strong data engineering and analytics fundamentals, including building reliable ETL/ELT pipelines, orchestration, data modelling, and implementing data quality controls.
</li><li>Familiarity with Model Context Protocol (MCP) or similar integration frameworks is desirable.
</li><li>Basic understanding of the intelligence lifecycle is beneficial but not essential.
</li><li>Awareness of the cyber threat landscape, including common adversary tactics, techniques, and procedures (TTPs) is desirable but not essential.
</li><li>Knowledge of standard methods / systems for analysis and prioritisation of vulnerabilities e.g. CVE, CVSS, is desirable but not essential.
</li><li>Understanding of political, operational, and security risks in the maritime, transport, and logistics sectors is preferable.
</li></ul><p></p><p><b>Professional qualifications:
</b></p><p></p><ul><li>Bachelor&rsquo;s degree in Computer Science, Engineering, Mathematics, Statistics, Data Science, or a related discipline (or an equivalent qualification).
</li><li>Certification or formal training in analytics engineering or data modelling (e.g. dimensional modelling, metrics design, data quality).
</li><li>Cloud certification or training in AWS or equivalent platforms, such as AWS Certified Data Engineer &ndash; Associate and/or AWS Certified Developer &ndash; Associate (or equivalent).
</li><li>Certification or formal training in Applied AI or Generative AI fundamentals.
</li><li>Cyber security or threat intelligence training is beneficial but not essential.
</li><li>Security certifications such as CEH, OSCP, SANS, or equivalent are desirable but not essential.
</li></ul><p></p><p><b>Technical skills &amp; knowledge:
</b></p><ul><li>Proficient in writing complex SQL queries for repeatable operational analytics and reporting.
</li><li>Proficient in applied Data Science / Machine Learning using Python, TypeScript/Node.js, or similar languages.
</li><li>Solid understanding of Forecasting process and algorithms and causality.
</li><li>Proficient in data visualization tools and techniques to effectively deliver complex findings.
</li><li>Solid cloud fundamentals, preferably with AWS (e.g., S3, Lambda, Glue, Step Functions, API Gateway, CloudWatch, or equivalent services).
</li><li>Strong data engineering and analytics fundamentals, including building reliable ETL/ELT pipelines, orchestration, data modelling, and implementing data quality controls.
</li><li>Familiarity with Model Context Protocol (MCP) or similar integration frameworks is desirable.
</li><li>Basic understanding of the intelligence lifecycle is beneficial but not essential.
</li><li>Awareness of the cyber threat landscape, including common adversary tactics, techniques, and procedures (TTPs) is desirable but not essential.
</li><li>Knowledge of standard methods / systems for analysis and prioritisation of vulnerabilities e.g. CVE, CVSS, is desirable but not essential.
</li><li>Understanding of political, operational, and security risks in the maritime, transport, and logistics sectors is preferable.
</li></ul><p></p><p><b>Professional skills:
</b></p><ul><li>Excellent written and verbal communication skills (English) and able to be understood by both technical and non-technical personnel.
</li><li>A motivated and self-starting individual with ability to self-task.
</li><li>Strong interpersonal skills including, teamwork/collaboration and relationship building.
</li><li>Excellent time-management and workload prioritisation skills.
</li><li>Positive, can-do attitude, engaging, ability to accommodate agile methodologies and ability to work well under pressure.
</li><li>Can accommodate requirements that may from time-to-time, fall beyond CTI, into other Cyber Security disciplines.
</li></ul><p></p><p><b>Experience </b>:
</p><ul><li>5+ years previous experience operating in a data analytics, science or engineering role, ideally within cyber security or similar.
</li><li>At least two years of experience with visualisation tools such as Power BI, MS Fabric, or Amazon QuickSight.
</li><li>Experience handling sensitive data and applying governance practices&mdash;access control, secrets management, encryption, and audit‑ready logging.
</li><li>Experience with API engineering and automation in a security operations context is desirable but not essential.
</li><li>Experience working with CTI teams, threat intelligence data, or TIP/SIEM integrations is desirable.
 </li></ul><p><b>Key Measures:
</b></p><ul><li>Timely dissemination of regular and ad-hoc products across the organisation.
</li><li>Application and review of existing processes (improvements through automation, data quality, and repeatable workflows).
</li><li>Delivery of reliable Cyber Security data feeds and curated outputs to internal consumers via APIs/MCP.
</li><li>Reliability of data pipelines and interfaces (e.g., freshness/latency, error rates, successful runs, and recovery time).
</li></ul><p></p><p>Maersk is committed to a diverse and inclusive workplace, and we embrace different styles of thinking. Maersk is an equal opportunities employer and welcomes applicants without regard to race, colour, gender, sex, age, religion, creed, national origin, ancestry, citizenship, marital status, sexual orientation, physical or mental disability, medical condition, pregnancy or parental leave, veteran status, gender identity, genetic information, or any other characteristic protected by applicable law. We will consider qualified applicants with criminal histories in a manner consistent with all legal requirements.<br>
</p><p></p><p>We are happy to support your need for any adjustments during the application and hiring process. If you need special assistance or an accommodation to use our website, apply for a position, or to perform a job, please contact us by emailing accommodationrequests@maersk.com .</p></div><p></p>

Data Scientist – Cyber Threat Intelligence

NTT DATA

<div><p><b>Make an impact with NTT DATA</b><br>
Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion &ndash; it&rsquo;s a place where you can grow, belong and thrive.</p><p></p><div><b>
Your day at NTT DATA</b><br>
A Security Threat Intelligence and Hunting Analyst is a seasoned subject matter expert, responsible for analyzing and detecting cyber threats and malware impacting the company.<br>
<br>
The main responsibility of this role is to investigate the level of threat posed by an attack and consequently enable the organization to take informed cybersecurity-based business decisions.<br>
<br>
This role plays a key role in gathering, analyzing and synthesizing information about current and potential threats to inform the organization&rsquo;s security strategy.</div><div><b><br>
Key responsibilities:</b><ul><li>
Reads reports, makes risk assessments, works to detect the source of attacks and tests current defenses against threats.</li><li>
Advises on analysis enabling organization to make decisions on how to improve security measures and respond to attacks.</li><li>
Monitors security alerts and maintains awareness of new threats and vulnerabilities in order to identify potential risks.</li><li>
Analyses data from various sources, including network traffic, email logs, malware files, web server logs, DNS records, etc. to identify cybersecurity risks.</li><li>
Develops and maintains threat intelligence databases containing information about cybercrime tactics, techniques, and procedures (TTPs) used by hackers or other actors targeting the organization&rsquo;s assets.</li><li>
Participates in Incident Response activities as necessary to identify and contain new threats.</li><li>
Conducts investigations into potential threats by collecting data from multiple sources and analyzing it to identify patterns or other significant pieces of information that indicate a specific threat may be occurring or has occurred previously.</li><li>
Communicates with senior leaders and also executives and other stakeholders on security matters to raise awareness of potential risks and recommend solutions.</li><li>
Conducts regular audits of security measures to identify vulnerabilities that could be exploited by unauthorized users.</li><li>
Reviews security policies to ensure compliance with industry regulations and best practices.</li><li>
Creates reports about potential threats for internal use by management or external use by customers or other stakeholders.</li><li>
Performs any other related task as required.</li></ul></div><div><b><br>
To thrive in this role, you need to have:</b><ul><li>
Ability to apply critical thinking skills to a situation and make a decision based on the information to hand.</li><li>
Good understanding of computer systems, software and technology in general.</li><li>
Excellent written and verbal communication.</li><li>
Ability to research topics and find information relevant to their work.</li><li>
Ability to interpret large amounts of data and identify important details to identify potential threats and vulnerabilities.</li><li>
Seasoned proficiency in threat hunting methodologies, including familiarity with tools and techniques for proactive detection of threats.</li><li>
Seasoned knowledge of data analysis, log analysis, and behavioral analytics to identify anomalous activities and indicators of compromise (IOCs).</li><li>
Ability to contribute to investigations, perform post-incident analysis, and identify threat actor tactics, techniques, and procedures (TTPs)</li><li>
Seasoned proficiency in threat intelligence analysis, including the ability to collect, correlate, and interpret large volumes of data from multiple sources.</li><li>
Strong analytical and critical thinking skills are required to identify patterns, trends, and potential risks</li><li>
Seasoned knowledge of cybersecurity principles, attack vectors, and defensive strategies is essential.</li><li>
Seasoned familiarity with various security technologies, threat intelligence platforms, and data analysis tools is also necessary.</li></ul></div><div><b><br>
Academic qualifications and certifications:</b><ul><li>
Bachelor&rsquo;s degree or equivalent in computer science, information technology or security or related field.</li><li>
Relevant security certification(s) such as GIAC Certified Forensic Analyst (GCFA), GIAC Certified Forensic Examiner (GCFE), and GIAC Certified Forensic Analyst (GCFACTIA, CompTIA Cybersecurity Analyst (CySA+), GCTI, FOR508 preferred.</li></ul></div><div><b><br>
Required experience:</b><ul><li>
Seasoned demonstrated experience in a similar role.</li><li>
Seasoned demonstrated experience gained within a global technology organization.</li></ul></div><p></p><p><b>
Workplace type</b><b>:
</b></p>Hybrid Working<p></p><p><b>
About NTT DATA</b><br>
NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world&rsquo;s leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&amp;D.</p><p></p><p><b>
Equal Opportunity Employer</b><br>
NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.</p><p></p><p><b>
Third parties fraudulently posing as NTT DATA recruiters</b></p><p>
NTT DATA recruiters will never ask job seekers or candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties who may attempt to impersonate NTT DATA recruiters&mdash;whether in writing or by phone&mdash;in order to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will come from an <b>@nttdata.com</b> email address. If you suspect any fraudulent activity, please <i>contact us</i>.</p></div>

Security Threat Intelligence and Hunting Analyst

Partner One Capital

<div><p><b>About NetWitness</b></p><p>
NetWitness is a leader in cybersecurity incident response, delivering cutting-edge solutions for threat detection, forensics, and response. Join our elite Incident Response team to safeguard critical infrastructure against evolving cyber threats.</p><p></p><p><b><br>
Job Summary</b></p><p>
We are seeking a highly skilled Senior Cybersecurity Digital Forensics Specialist to join our NetWitness Incident Response team. In this remote role, you will lead complex digital forensics investigations, perform advanced incident response, and support clients in high-stakes environments. The ideal candidate thrives in fast-paced scenarios, combining deep technical expertise with bilingual communication skills.</p><p></p><p><b><br>
Key Responsibilities</b></p><br>
<p></p><ul><li>
Conduct thorough digital forensics examinations on endpoints, networks, memory, and cloud environments using industry-leading tools.</li><li>
Lead incident response engagements, including triage, malware analysis, threat hunting, and root cause determination.</li><li>
Develop forensic reports, timelines, and executive summaries for clients and stakeholders.</li><li>
Participate in the development or customization of tools and scripts to speed up any investigation process.</li><li>
Collaborate with cross-functional teams to mitigate threats and recommend remediation strategies.</li><li>
Travel up to 50% of the time for on-site investigations, client meetings, or incident support as needed.</li><li>
Mentor junior analysts and contribute to team knowledge-sharing initiatives.</li></ul><br>
<b>
Requirements</b><p><br>
7+years of experience in cyber security and 5+ years of hands-on experience in digital forensics and incident response (DFIR).</p><p>
SANS certifications in DFIR and Incident Response (e.g., FOR508, GCIH, or equivalent), in particular, at least one between the following:</p><br>
<p></p><ul><li>
GCFA (GIAC Certified Forensic Analyst):</li><li>
GCFE (GIAC Certified Forensic Examiner)</li><li>
GCIH (GIAC Certified Incident Handler)</li><li>
GNFA (GIAC Network Forensic Analyst)</li></ul><p></p><p>
And at least one between the following:</p><ul><li>
GCFR (GIAC Cloud Forensics Responder)</li><li>
GBFA (GIAC Battlefield Forensics and Acquisition)</li><li>
GCTI (GIAC Cyber Threat Intelligence)</li><li>
GREM (Reverse Engineering Malware) for niche forensics.</li></ul><p></p><p>
Fluency in English and Arabic (spoken and written).</p><p>
Legal entitlement to work in Qatar.</p><p>
Availability for remote work with up to 50% travel.</p><p></p><p><b><br>
Preferred Qualifications</b></p><p>
Programming skills in Python and/or SQL for automation, scripting, and data analysis.</p><p>
Additional cybersecurity certifications (e.g., GCFA, GCFE, CISSP, OSCP, or equivalent).</p><p>
Experience with tools like Volatility, EnCase, FTK, Wireshark, or NetWitness platforms.</p><p>
Familiarity with MITRE ATT&amp;CK, threat intelligence, or OT/ICS forensics.</p><b><br>
Benefits</b><p><br>
Competitive salary and benefits package.</p><p>
Flexible remote work with travel support.</p><p>
Opportunities for professional growth in a dynamic cybersecurity environment.</p><p>
Collaborative culture focused on innovation and impact.</p></div>

Senior Cybersecurity Digital Forensics Specialist

Bolster

<div><div><div><b>About Bolster</b></div><div><b>
</b></div><div>
Bolster turns the security paradigm upside down and removes threats and digital risks before an attack occurs. Our protection extends beyond the enterprise to customers and partners. Our approach is the antithesis of today&rsquo;s cyber defense strategy, which is to wait for an attack than try and prevent it. Or worse, assume you have been breached and hope you can detect it. We leverage the power of AI to apply deep learning, computer vision, and natural language processing to identify criminal intent on millions of web pages daily. We tirelessly monitor the Internet to find malicious web pages that could cause harm and remove them. We empower companies to take back control of the Internet by continuously eliminating the threats that threaten their business, customers, and brand.
</div><div>
</div><div>We are just getting started, and the future could not be more exciting. We&rsquo;re growing the team in all functions as we transition from a small start-up into the next phase of our journey. We are looking for A-list talent who will have a meaningful impact, solve new challenges, and take ownership of the future of Bolster. If this is you, apply and join our team!</div><div></div><div><br>
As a Threat Hunting Analyst (Pre Sales Support), you will play a critical role in supporting the Sales / Pre-Sales team by demonstrating the strength of our threat detection and investigation capabilities to prospective customers. You will conduct targeted threat investigations, analyze phishing and scam infrastructure, and translate technical findings into impactful insights that support customer acquisition and trust-building.</div><div>
This role bridges Threat Hunting expertise with customer-facing engagement, requiring strong technical depth along with excellent communication skills.</div></div>
<div><div><h3 class="jobSectionHeader"><b>Responsibilities</b></h3><ul><li><ul><li>
Conduct investigative threat hunts for Bolster&rsquo;s prospective customers across web, social media platforms, mobile applications etc.</li><li>
Identify phishing, scam, impersonation, malicious domains, credential harvesting sites, fake login portals, and related attacker infrastructure across multiple modules.</li><li>
Analyze phishing infrastructure including domains, hosting patterns, redirects, phishing kits, cloaking techniques, and attacker tooling.</li><li>
Prepare detailed pre-sales investigation reports, executive summaries, and technical findings tailored to customer audiences.</li><li>
Partner closely with Sales team during demos and proof-of-concept (POC) engagements.</li><li>
Support RFP/RFI responses with technical inputs related to threat hunting, detection capabilities, and investigative workflows.</li><li>
Generate periodic and ad-hoc reports highlighting threat activity and detection insights.</li><li>
Contribute to internal knowledge repositories and reusable investigation playbooks for pre-sales use cases.</li></ul></li></ul></div></div>
<div><div><h3 class="jobSectionHeader"><b>Required Skills / Qualifications</b></h3><ul><li><ul><li>
2+ years of hands-on experience in threat hunting, with prior experience in supporting Pre-Sales team, or customer demos in a cybersecurity environment.</li><li>
Strong understanding of threat hunting methodologies and the threat intelligence lifecycle.</li><li>
Ability to work independently in a fast-paced, SLA-driven environment.</li><li>
Experience analyzing phishing emails, websites, SMS, ads, domain abuse, and social media impersonation.</li><li>
Familiarity with phishing kits, hosting analysis, domain infrastructure, and attacker tradecraft.</li><li>
Experience working with OSINT tools, enrichment platforms, and large datasets.</li><li>
Ability to translate technical findings into clear, customer-friendly narratives.</li><li>
Strong written and verbal communication skills.</li><li>
Experience in startup or high-growth environments is a plus.</li></ul></li></ul></div></div>
<div><div><b>Why Bolster</b></div><div></div><div><br>
We are the leader in Anti-Phishing AI!</div><div>
</div><div>
Bolster creates a Next-Generation Fraud Prevention SaaS platform &amp; CheckPhish community platform based on pioneering work in Artificial Intelligence-based phishing and scam detection systems.</div><div>
</div><div>
Bolster protects the world&rsquo;s top brands like Zoom, Dropbox, Uber, LinkedIn, Roblox, and other Fortune 500 customers. We are funded by top-tier investors led by Thomvest Ventures and Crosslink Capital. Our team has over 100 years of combined cybersecurity experience at Cisco, Symantec, McAfee, Bell Labs, Open DNS, and Lacework.</div><div>
</div><div>
Our AI/ML technology protects regular citizens from bad actors on the internet, using industry-leading deep learning, computer vision, natural language processing, and machine learning models for highly accurate real-time detection &amp; automated takedown of fraudulent sites at the internet scale.</div><div>
</div><div>
We also brought our technology to the community with CheckPhish, https://checkphish.ai. It is a free tool that protects millions of consumers from daily phishing, fraud, and fake sites. Charities, non-profits, social benefit corps, and schools are targets too. To aid the world, we will give our technology &amp; services for free or at cost to any approved charity, non-profit, or social benefit corporation.</div><div>
</div><div>
Our work is challenging but fun. We're all about shipping elegant, high-leverage products. Bolster cares deeply about collaboration, feedback, and iteration. Trust and respect are deeply rooted in our unique culture. Our inspiring proven leaders are hiring great people, providing super benefits, and impacting the world!</div><div></div><div><b><br>
**PLEASE NOTE THAT THIS ROLE REQUIRES IN OFFICE COLLABORATION/ATTENDANCE 3X A WEEK ****</b></div></div><br>
<div></div>
<div><div>
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</div></div></div>

Security Analyst II, Threat Hunting (Pre-Sales Support)

help AG

<div><p>Help AG is looking for a Senior Threat Intelligence Specialist who will be responsible for the day to day operations of our cyber threat intelligence and digital risk protection team. The Specialist will ensure delivery of all CTI and DRP services as per our contractual obligation to our customers. The Specialist will also bring new ideas for service enhancements and new service developments. This role is vital to the success of Help AG&rsquo;s MSS services and to providing exceptional CTI and DRP services to our customers.</p><p><b><br>
Responsibilities:</b></p><p></p><ul><li>
Conduct strategic cyber‑threat analysis by monitoring global threat actors, TTPs, and emerging technologies to assess risks and produce intelligence-driven recommendations for senior leadership.</li><li>
Evaluate geopolitical trends and regional developments to identify potential impacts on organizational security, operational resilience, and long‑term strategic planning.</li><li>
Develop intelligence reports, threat forecasts, and executive briefings that synthesize cyber, geopolitical, and economic indicators into clear, actionable insights for decision‑makers.</li><li>
Collaborate with internal security, risk, and incident response teams to contextualize threats, support risk assessments, and inform proactive defensive strategies.</li><li>
Lead strategic horizon scanning and scenario planning exercises to anticipate shifts in the global threat landscape, enabling the organization to prepare for emerging cyber and geopolitical risks.</li><li>
Ensure quality service delivery of all CTI and DRP services.</li><li>
Conduct phishing attack investigations and provide TTP-based attribution reports</li><li>
Monitor social media, forums, and the dark web for indicators of targeted threats or brand impersonation</li><li>
Collaborate with internal security and fraud teams to recommend threat mitigation strategies</li><li>
Utilize Digital Risk Protection (DRP) platforms to detect external threats such as impersonation, domain spoofing, and data leakage</li><li>
Produce threat reports with actionable intelligence, including IoCs and strategic recommendations</li><li>
Stay up-to-date with evolving threat actor groups, phishing kits, and darknet marketplaces</li><li>
Create Threat advisories.</li><li>
Manage Threat Intelligence Platform (MISP) and service.</li><li>
Manage Digital Risk Protection Service.</li><li>
Manage takedown service.</li><li>
Create SOPs for existing and new services.</li><li>
Enhance existing services.</li><li>
Propose and create new services.</li><li>
Create and manage service reports.</li><li>
Participate in client meetings.</li><li>
Manage service escalations.</li><li>
Problem management of CTI and DRP services</li></ul><p></p><p><b>
Qualifications &amp; Skills:</b></p><p></p><ul><li>
Qualifications: Bachelor / Master's Degree in Computer Science, Cybersecurity, Information Systems, or a closely related degree;</li><li>
An active, demonstrable interest in Cyber Security, Cyber Threat Detection, and Cyber Threat Intelligence</li><li>
Hands-on experience in anti-phishing and impersonation attack analysis</li><li>
Strong OSINT/SOCMINT skills (e.g., using Maltego, SpiderFoot, ShadowDragon, etc.)</li><li>
Familiarity with dark web forums, marketplaces, and Tor-based threat research</li><li>
Understanding of digital risk protection technologies (e.g., ZeroFox, Constella, Digital Shadows, etc.)</li><li>
Working knowledge of cyber threat intelligence frameworks (e.g., MITRE ATT&amp;CK, Diamond Model)</li><li>
Solid analytical writing and geopolitical awareness</li><li>
Demonstrable experience analyzing and interpreting threat intelligence indicators, TTPs, and threat actors</li><li>
A solid understanding of IT systems and network security concepts</li><li>
Sound knowledge of IT security best practices, common attack types, and detection/prevention methods.</li><li>
Demonstrable experience in analyzing and interpreting system, security, and application logs</li><li>
Knowledge of the type of events that both Firewalls, IDS/IPS, and other security-related devices produce</li><li>
Experience in using SIEM tools such as Splunk, ArcSight, LogRythm, Qradar, NitroSecurity, etc.</li><li>
TCP/IP knowledge, networking, and security product experience</li><li>
Possible attack activities, such as scans, man-in-the-middle, sniffing, DoS, DDoS, etc., and possible abnormal activities, such as worms, Trojans, viruses, etc.</li><li>
CCNA, CISSP, GCIA, GCIH, and CEH certifications would be preferable.</li><li>
Outstanding Organizational Skills.</li><li>
Exclusive focus and vast experience in IT.</li><li>
Strong analytical and problem-solving skills.</li><li>
Ability to interface with, and influence, Pre-Sales and Sales teams, to achieve agreed business outcomes.</li><li>
Flexible work approach, based on the job requirements.</li></ul><p></p><p><b>
Benefits:</b></p><p></p><ul><li>
Health insurance with one of the leading global providers for medical insurance.</li><li>
Career progression and growth through challenging projects and work.</li><li>
Employee engagement and wellness campaigns activities throughout the year.</li><li>
Excellent learning and development opportunities.</li><li>
Annual flights tickets.</li><li>
Inclusive and diverse working environment.</li><li>
Flexible/Hybrid working environment.</li><li>
Open door policy.</li></ul><p></p><p><b>
About Us:</b></p><p></p><p>
Help AG is the cybersecurity arm of e&amp; enterprise (formerly Etisalat Digital) and provides leading enterprise businesses across the Middle East with strategic consultancy combined with tailored information security solutions and services that address their diverse requirements, enabling them to evolve securely with a competitive edge.Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; (formerly Etisalat Group) in 2020, hence creating a cybersecurity and digital transformation powerhouse in the region.<br>
<br>
Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor-agnostic, trustworthy, independent, and maintaining its focus on all aspects of cybersecurity. With best of breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business.</p></div><p></p>

Senior Threat Intelligence Specialist

Microsoft

<div><b>Overview</b><p><br>
The Defender Experts (DEX) Research team is at the forefront of Microsoft&rsquo;s threat protection strategy, combining world-class hunting expertise with AI-driven analytics to protect customers from advanced cyberattacks. Our mission is to move protection left&mdash;disrupting threats early, before damage occurs&mdash;by transforming raw signals into intelligence that powers detection, disruption, and customer trust.</p><b><br>
Responsibilities</b><ul><li><ul><li><p><br>
Design and maintain scalable threat graphs that model entities such as devices, identity, threat actors, TTPs, infrastructure, and campaigns.
</p></li><li><p>Execute advanced research to develop algorithms and heuristics to detect malicious patterns and relationships within graph data on emerging cloud-based threats impacting Microsoft and third-party security products across heterogeneous cloud environments.
</p></li><li><p>Collaborate with threat protection researchers, data scientists, and detection engineers to enrich graph models with contextual insights and refine detection and response strategies, to provide comprehensive threat coverage and response capabilities.
</p></li><li><p>Research and prototype novel graph-based techniques for threat detection, attribution, and prioritization in collaboration with internal and external security teams.
</p></li><li><p>Translate complex raw security data into actionable graph intelligence that enhances the effectiveness of security operations for a global customer base.
</p></li><li><p>Mentor, guide, and drive best practices among researchers and detection engineers on advanced graph-based threat hunting and incident response across diverse ecosystems.
</p></li><li><p>Contribute to industry knowledge and Microsoft&rsquo;s security posture by publishing research, developing threat graph models, and proactively identifying threats and attack trends in the cloud.</p></li></ul></li></ul><b><br>
Qualifications</b><ul><li><ul><li><p><br>
Strong understanding of graph theory, graph databases (e.g., Neo4j, TigerGraph), and graph analytics with proficiency in Python or similar languages for data analysis and prototyping.
</p></li><li><p>Experience working with large-scale datasets, distributed systems and graph analytics projects.
</p></li><li><p>Ability to translate complex threat data into graphs and actionable insights.
</p></li><li><p>Experience with machine learning or statistical modelling applied to graph data.
</p></li><li><p>Proven ability to execute advanced research on emerging cloud-based threats affecting both Microsoft and third-party security products across heterogeneous cloud environments.
</p></li><li><p>Knowledge of adversary infrastructure tracking, malware analysis, or campaign clustering.
</p></li><li><p>Extensive hands-on experience with cloud platforms&mdash;including, but not limited to, Azure&mdash;as well as a deep understanding of multi-cloud security challenges and solutions.<br>
</p></li></ul></li></ul><br>
<p>This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.</p><p></p><p><br>
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process<b>.</b></p></div>

Graph Researcher II

Search 6624+ Threat intelligence analyst jobs near you this March. New roles added regularly across leading industries. Apply today.