Threat Intelligence Lead

🗓️ Posted 2026-08-23 Riyadh, Saudi Arabia Full-time Hybrid ICT

Company shared salary

NA

Market rate

SAR 24,000–SAR 38,000/mo (SAR 288,000–SAR 456,000/yr)

Based on similar roles (title + domain + location).

About the Company

NourNet is seeking a Threat Management Lead on behalf of one of our clients. The selected candidate will lead and mature the organization's cyber threat intelligence and threat hunting capabilities, ensuring proactive identification, analysis, and mitigation of threats across critical environments. This role is ideal for seasoned cybersecurity professionals with strong leadership in CTI operations, structured hunting programs, and risk based prioritization.

Responsibilities

  • CTI Program Management - Build, operate, and enhance the cyber threat intelligence program using internal and external intelligence sources.
  • Threat Actor Profiling - Analyze adversaries, campaigns, and TTPs relevant to financial sector operations and regional exposure.
  • Hypothesis-Based Threat Hunting - Lead structured hunting campaigns leveraging logs, endpoint telemetry, network data, and cloud insights.
  • Risk-Based Prioritization - Correlate vulnerabilities, asset criticality, and intelligence to drive risk aligned decisions.
  • Threat Reporting - Deliver periodic threat landscape reports and ad hoc advisories for internal stakeholders.
  • Detection Engineering Input - Provide intelligence-driven recommendations for new detection rules and support GRC risk register updates.
  • IR & DFIR Collaboration - Support deep investigations requiring adversary behavior analysis.
  • Intel Intake & Dissemination - Maintain workflows and tools for intelligence intake, triage, enrichment, and dissemination within the Cyber Defense Center.
  • 6+ years in threat intelligence, threat hunting, or vulnerability management.
  • Proven experience leading structured hunting programs.
  • Familiarity with Qualys or similar vulnerability management platforms.
  • Strong understanding of financial sector threat landscapes.
  • CTI Operations
  • Threat Hunting Leadership
  • Vulnerability Governance
  • SLA Tracking
  • Risk-Based Prioritization
  • Executive Reporting & Briefings