Digital Threat Specialist

Job Description

Help AG is looking for an experience Digital Threat Hunting Specialist who will be responsible for proactively identifying, investigating, and mitigating advanced cyber threats within the client environment through hypothesis-driven threat hunting activities. This position will focus on proactive threat hunting, advanced threat analysis, detection engineering, threat intelligence correlation, investigation of suspicious activities, and continuous improvement of cyber defense capabilities.

• Proactively conduct hypothesis-driven threat hunting across enterprise networks, endpoints, cloud, and hybrid environments to identify advanced persistent threats (APTs) and hidden malicious activities.
• Investigate suspicious events and analyze attacker tactics, techniques, and procedures (TTPs) using the MITRE ATT&CK framework.
• Perform advanced analysis of security logs, endpoint telemetry, network traffic, authentication events, and cloud security data to identify indicators of compromise (IOCs) and indicators of attack (IOAs).
• Develop and refine threat hunting methodologies, playbooks, and standard operating procedures.
• Create and enhance detection use cases, analytics rules, and hunting queries within SIEM and EDR platforms.
• Support Incident Response teams by providing detailed investigative findings, root cause analysis, and threat attribution where applicable.
• Collaborate with Security Operations, Threat Intelligence, Vulnerability Management, and Infrastructure teams to strengthen the overall security posture.
• Prepare technical reports, threat hunting findings, executive summaries, and recommendations for continuous security improvement.
• Provide technical guidance on threat hunting best practices, detection strategies, and emerging attack techniques.

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Information Security, Engineering, or a related field. Equivalent professional experience and relevant certifications may be considered in lieu of a degree.
• 7+ years of experience in cybersecurity operations, threat hunting, incident response, security monitoring, or detection/security engineering.
• Demonstrable, hands-on experience leading or performing proactive threat hunts in enterprise scale environments.
• Strong understanding of threat hunting methodologies, cyber kill chain, MITRE ATT&CK framework, and adversary TTPs.
• Experience with Endpoint Detection and Response (EDR) platforms such as Microsoft Defender for Endpoint, Crowd Strike, Sentinel One, Cortex XDR, or equivalent.
• Experience analyzing Windows, Linux, Active Directory, cloud, endpoint, and network security telemetry.
• Knowledge of threat intelligence platforms, IOC analysis, malware behavior, and advanced attack techniques.
• Experience developing detection rules, hunting queries (KQL, SPL, or equivalent), and SIEM use cases.
• Relevant certifications such as SC-200, GCTI, GCIH, GCFA, CISSP, CISM, CompTIA CySA+, or equivalent are preferred.
• Solid understanding of networking fundamentals, operating system internals, and common enterprise architectures (on-premises, cloud, and hybrid).
• Familiarity with security frameworks, standards, and regulatory requirements (e.g., NIST, ISO 27001, and relevant UAE/regional cybersecurity regulations).
• Ability to work effectively under pressure, manage multiple priorities, and operate with minimal supervision in a fast-paced operational environment.
• Strong stakeholder management and client-facing communication skills, with the ability to build trust and credibility with technical and business audiences.
• Fluency in English (written and spoken);
  Arabic language skills are an advantage.

• Health insurance with one of the leading global providers for medical insurance.
• Career progression and growth through challenging projects and work.
• Employee engagement and wellness campaigns activities throughout the year.
• Annual Flight tickets to home country.
• Excellent learning and development opportunities.
• Flexible/Hybrid working environment.
• Inclusive and diverse working environment.
• Open door policy

Help AG, the cybersecurity arm of e&, is the Middle East's trusted cybersecurity partner, enabling governments, enterprises and critical industries to innovate with confidence. Combining strategic consulting, advanced managed security services and deep technology expertise, Help AG helps organisations strengthen cyber resilience, secure AI adoption and build trusted sovereign digital environments. With regional expertise and a customer-first approach, Help AG delivers end-to-end cybersecurity capabilities designed to protect critical operations, manage evolving risks and support secure digital transformation.

Through continuous innovation, trusted partnerships and measurable outcomes, Help AG enables organisations to remain resilient, prepared and confident in a complex digital world.