Threat Hunter

Job Description

• Skilled in identifying advanced threats and anomalies through proactive hunting techniques across endpoints, networks, and cloud environments
  
• Proficient with EDR, SIEM, threat intelligence platforms, and using frameworks like MITRE ATT&CK for hypothesis-driven hunting
  
• Strong capabilities in log analysis, behavioral analytics, and identifying indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs)
  
• Works closely with SOC and IR teams to validate threats and improve detection capabilities
  
• Experience with scripting languages (e.g., Python, PowerShell) to automate hunting tasks and enrich data
  
• Certifications Preferred: GCTI, GCFA, or equivalent
  

Requirements

• Bachelor's degree in computer science, Information Technology or related Subject
  
• 8+ Years of related experiences
  
  

Requirements
5+ years of hands-on Siemens S7 experience — specifically S7-300 programming, diagnostics, and data block structure via Step 7 Classic or TIA Portal Profibus DP fluency — able to diagnose bus faults, read GSD device profiles, identify slave addresses, and recover from "MP Bus Blackout"-class faults without vendor support WinCC Flexible proficiency — able to navigate and extract tag configuration, alarm classes, and screen logic from an existing compiled WinCC Flexible project OPC UA implementation experience — via any of: Siemens Industrial PC OPC Server, KEPServerEX, open62541, or a Snap7-based Linux gateway solution Industrial networking — OT/IT convergence, unmanaged Profibus topology vs. managed Ethernet, VLAN design, and understanding of where IT security policy collides with OT real-time requirements Ability to independently read and produce electrical schematics, PLC I/O mapping sheets, drive parameter tables, and field device wiring diagrams Comfortable working on an active, high-visibility public-facing site in Qatar — able to obtain Qatar SafePass, site-specific HSE inductions, and work under the relevant site access protocols Fluent English — can write clear technical documentation and communicate directly with European OEM contractors, a remote software development team, and the client's facilities management team