Key Responsibilities
Threat Monitoring & Analysis: Continuously monitor global and regional threat landscapes, including campaigns targeting KSA and GCC.
Intelligence Gathering: Collect and curate threat data from open-source, commercial, and proprietary feeds; perform OSINT investigations.
Reporting & Briefings: Produce detailed threat intelligence reports, advisories, and executive briefings for internal stakeholders and clients.
Threat Modeling: Define intelligence requirements and apply structured analytical techniques to assess adversary tactics, techniques, and procedures (TTPs).
Collaboration: Work with SOC and Incident Response teams to operationalize intelligence into detection rules, threat hunting, and response playbooks.
Compliance Alignment: Ensure CTI processes align with frameworks such as SAMA Cybersecurity Framework and NCA ECC controls.
Required Skills & Qualifications
Bachelor s degree in computer science, Cybersecurity, or related field.
2-4 years of experience in Cyber Threat Intelligence or related domains (SOC, DFIR, Threat Hunting).
Strong knowledge of threat actor groups, malware families, and attack campaigns relevant to the Middle East.
Hands-on experience with CTI tools and platforms (e.g., MISP, ThreatConnect, Recorded Future).
Familiarity with MITRE ATT&CK framework and structured analytic techniques.
Excellent analytical, communication, and report-writing skills.
Certifications such as GIAC GCTI, CompTIA CySA+, or equivalent are a plus.
Bachelor s degree in computer science, Cybersecurity, or related field.
2-4 years of experience in Cyber Threat Intelligence or related domains (SOC, DFIR, Threat Hunting).
Strong knowledge of threat actor groups, malware families, and attack campaigns relevant to the Middle East.
Hands-on experience with CTI tools and platforms (e.g., MISP, ThreatConnect, Recorded Future).
Familiarity with MITRE ATT&CK framework and structured analytic techniques.
Excellent analytical, communication, and report-writing skills.
Certifications such as GIAC GCTI, CompTIA CySA+, or equivalent are a plus.
