Cyber Security Technical Content Writer

Role Summary

Cytomate is seeking an experienced Cyber Security Technical Content Writer to join its threat research function in a hybrid setup based in Doha, Qatar. This position is aimed at professionals who can interpret advanced cyber threat research and turn it into polished, reader-ready publications.

This is a highly specialized opportunity for candidates with practical cybersecurity knowledge. The focus is on people who understand real attack activity and can communicate complex findings with technical accuracy and clarity.

What the Role Covers

You will partner with offensive security researchers, malware analysts, and threat intelligence specialists to create authoritative content derived from real adversary behavior. The subject matter includes:

• APT operations and analysis of attacks seen in the wild
• Malware execution patterns and behavioral chains
• Adversary tactics, techniques, and procedures mapped to MITRE ATT&CK
• Evasion strategies and ways attackers bypass defenses
• Red Teaming and Breach & Attack Simulation (BAS) research
• Detection engineering and validation-focused security insights
• Threat activity across cloud, endpoint, network, and OT/ICS environments

Key Responsibilities

Your work will involve turning internal research into external-facing publications and helping shape technical thought leadership content.

• Create technical blogs, whitepapers, and threat intelligence reports
• Convert internal security findings into well-organized public content
• Study new threat actors, malware families, and attack methods
• Work in coordination with offensive security and intelligence teams
• Support thought leadership publishing across different platforms

Required Technical Strength

The ideal candidate should already have a strong grasp of core cybersecurity concepts and attacker tradecraft, along with the ability to write with precision.

• Solid working knowledge of the MITRE ATT&CK framework
• Understanding of Windows internals and Active Directory attack paths
• Familiarity with EDR/XDR tools and common control-bypass techniques
• Knowledge of command-and-control (C2) frameworks
• Awareness of modern attacker methods and APT-style operations
• Ability to produce structured, accurate writing from technical research

Preferred Background

Experience in malware analysis or reverse engineering will be considered an advantage. Candidates who already have published cybersecurity blogs, research articles, or threat reports will also stand out.

Engagement Details

• Direct collaboration with offensive security and threat research teams
• Exposure to real-world adversary emulation and research setups
• Hybrid working arrangement

Application Requirements

Applicants should submit a CV or resume, a LinkedIn profile, a portfolio or samples of previous writing such as blogs, research papers, or reports, and a sample write-up on a recent cyber attack or threat campaign.

Important Note

This is a deeply technical role. Candidates without hands-on cybersecurity experience or a solid research background are unlikely to be shortlisted.