Senior Specialist - SOC Threat Intelligence

DeepLight AI is a specialist AI and data consultancy with extensive experience implementing intelligent enterprise systems across multiple industries, with particular depth in financial services and banking. Our team combines deep expertise in data science, statistical modeling, AI/ML technologies, workflow automation, and systems integration with a practical understanding of complex business operations.

DeepLight AI is a specialist AI and data consultancy dedicated to transforming the regional corporate landscape through bespoke, high-impact intelligent systems. Based in the UAE, we partner with organizations across diverse sectors—​with a deep-rooted expertise in Financial Services and Banking—to bridge the gap between complex data and actionable business strategy.

At DeepLight, we don't believe in "off-the-shelf" fixes. We deliver tailored AI solutions designed to integrate seamlessly into existing enterprise architectures, ensuring that innovation is both scalable and secure. From building robust data foundations to deploying sophisticated AI platforms, we empower our clients to lead in an increasingly automated world.

The Senior Specialist – SOC Threat Intelligence is a senior analytical position within Deeplight consultancy, embedded directly within a major banking client. This role is responsible for collecting, analyzing, and operationalizing cyber threat intelligence to drive proactive detection capabilities within the bank’s Security Operations Center (SOC). Serving as a critical link between global threat landscapes and localized defensive operations, this position ensures that emerging indicators of compromise (IoCs) and adversary tactics are rapidly converted into actionable detection rules, upholding Deeplight’s standards of technical precision and professional excellence in the financial sector.

Responsibilities

• Threat Intelligence Analysis: Collect, evaluate, and analyze technical threat intelligence from open-source, commercial, and dark-web feeds to identify threats relevant to the banking infrastructure.
• Proactive SOC Enablement: Translate tactical threat data into actionable detection use cases, correlation rules, and watchlists within the enterprise SIEM/XDR platforms.
• Adversary Tracking: Monitor and document the Tactics, Techniques, and Procedures (TTPs) of financially motivated threat groups and advanced persistent threats (APTs) targeting the financial services sector.
• Incident Response Support: Provide technical context and specialized intelligence support to SOC analysts and incident responders during active security investigations or high‑severity alerts.
• Senior Briefings: Synthesize technical intelligence findings into clear, structured threat advisories and situational briefings for senior security management and risk stakeholders.
• Strategic Collaboration: Represent DeepLight on the ground by modeling proactive operational leadership, technical accuracy, and collaborative problem‑solving across the global SOC function.

As an AI consultancy, our greatest asset is the expertise of our people. While technical mastery is the foundation of what we do, the ability to bridge the gap between complex data science and actionable business value is what defines your success with DeepLight. We’re looking for individuals who are not only world‑class in their fields of specialism, but also compelling communicators and persuasive advocates for their own skills. You will be the face of our firm, tasked with building trust, articulating the "why" behind your technical decisions, and effectively "selling" your vision to high‑level stakeholders. If you thrive on the challenge of presenting cutting‑edge solutions as much as you do on building them, you will fit right in.

Qualifications

• Advanced proficiency in threat analysis frameworks, including the MITRE ATT&CK matrix, Cyber Kill Chain, and the Diamond Model of Intrusion Analysis.
• Deep understanding of modern SOC workflows, including SIEM content tuning, EDR/XDR monitoring, and log analysis.
• Capacity to analyze unstructured threat data, perform threat hunting investigations, and eliminate false positives to ensure high‑fidelity alerting.
• Practical experience with Threat Intelligence Platforms (TIPs), malware analysis tools, open‑source intelligence (OSINT) techniques, and commercial intelligence providers.
• Ability to communicate complex attack vectors and technical indicators clearly to frontline analysts, while providing concise impact summaries for senior leadership.

Desirable Capabilities

• Professional Certifications: Relevant designations such as GCTI (GIAC Cyber Threat Intelligence), GCIA, GCIH, CISSP, or specialized threat intelligence credentials.
• Automation & Scripting: Ability to write scripts (e.g., Python) to automate the ingestion, parsing, and distribution of threat indicators.
• Malware Analysis: Basic capability to perform static and dynamic analysis of malicious binaries or scripts to extract unique indicators of compromise.

Benefits

• Competitive salary
• Comprehensive personal health insurance
• Visa Sponsorship for the successful individual
• Professional development and certification support
• Subscription reimbursement relating to your role
• Opportunity to work on cutting‑edge AI projects
• Monthly Employee Incentive program
• Career advancement opportunities in a rapidly growing AI company

This position offers a unique opportunity to shape the future of AI implementation while working with a talented team of professionals at the forefront of technological innovation. The successful candidate will play a crucial role in driving our company's success in delivering transformative AI solutions to our clients.

At DeepLight AI, we recognise that diversity drives innovation. We are committed to fostering an inclusive environment where individuals with different thinking styles can thrive and contribute their unique strengths to our specialised AI and data solutions.