application operations center (aoc) engineer

business analyst

analyst-investment & strategy Jobs in Doha

analyst-investment & strategy

application operations center (aoc) engineer Jobs in Doha

business analyst (ict governance) Jobs in Doha

business analyst (ict governance)

business analyst - iam

csoc analyst l1

Forvis Mazars in Qatar

<div>Responsibilities

Responsible to triage cyber security incidents as a member of Security Operations Center incident responders&rsquo; team first line.
<ul><li>Continuously monitors the operating systems alert queue; triages security alerts; monitors health of operating systems security sensors and endpoints; collects data and context necessary to escalate to Tier 2 Analyst.
</li></ul><ul><li>Continuously monitoring the operating systems alert queue using multiple tools, such as SIEM, EDR and custom-built system monitoring tools.</li></ul>

<ul><li>Continuously monitors health of operating systems security sensors.</li></ul>

<ul><li>Conduction initial triage of alerts to identify potential, false positives, policy violations, intrusion attempts and compromises on the system level.</li></ul>

<ul><li>Consolidating data from alert triage to provide context necessary to escalate to Tier 2 Analyst.</li></ul>

<ul><li>Escalate to Tier 2 Analyst with all necessary data for deeper analysis and review.</li></ul>

Should have good knowledge of security tools as follows:

<ul><li>Knowledge about MS Windows and UNIX based systems</li></ul>

<ul><li>Knowledge TCP/IP version 4 and version 6</li></ul>

<ul><li>Security Event and Incident Monitoring System (SIEM), Orchestration tool and playbook response concept, Endpoint Detection and Response tool (EDR), Anti-malware systems, Intrusion Detection and Prevention Systems, Firewalls.</li></ul>

Required industry certificates:

<ul><li>Comp TIA CySA+ certificate &ndash; Cyber Security Analyst Certification - in good standing</li></ul>

<ul><li>Incident Response Fundamentals certificate &ndash; in good standing</li></ul> 


Recommended industry certificates:
<ul><li>Analyst/Administrator for any SIEM solution industry leaders</li></ul>

<ul><li>Some of SANS, GIAC, ISACA, (ISC)2 certificates or trainings</li></ul></div>

CSOC Analyst L1

<div>Job responsibilities: 

Responsible to triage operating system related cyber security incidents as a member of Security Operations Center incident responders&rsquo; team second line.
Performs deep-dive incident analysis by correlating data from various sources; determines if a critical system or data set has been impacted; advises on remediation; provides support for new analytic methods for detecting threats.

<ul><li>Proactively monitoring the operating systems alert queue using multiple tools, such as SIEM, EDR and custom-built system monitoring tools.</li></ul>

<ul><li>Conducting triage of alerts to identify potential, false positives, policy violations, intrusion attempts and compromises on the system level.</li></ul>

<ul><li>Consolidating data from alert triage to provide context necessary to escalate Tier 3 Analyst.
</li></ul><ul><li>Escalate to Tier 3 Analyst with all necessary data for deeper analysis and review.</li></ul>

<ul><li>Collecting evidence on operating system level for Incident analysis.</li></ul>

<ul><li>Advises on remediation.</li></ul>

<ul><li>Supporting operating system related security controls management.</li></ul>

<ul><li>Supporting operating system related threat detection analytics.</li></ul>

Should have good knowledge of security tools and skills as follows:

<ul><li>Knowledge about MS Windows and UNIX based systems</li></ul>

<ul><li>Knowledge TCP/IP version 4 and version 6</li></ul>

<ul><li>Manual testing skills</li></ul>

<ul><li>Automation testing skills</li></ul>

<ul><li>Technical writing skills</li></ul>

<ul><li>Problem solving skills and attention for detail</li></ul>

<ul><li>Malware analysis sandboxing solution, Security Event and Incident Monitoring System (SIEM), Orchestration tool and playbook response concept, Endpoint Detection and Response tool (EDR), Anti-malware systems, Intrusion Detection and Prevention Systems, Firewalls.</li></ul>

Required industry certificates:

<ul><li>ECC CEH &ndash; Certified Ethical Hacker - in good standing</li></ul>

<ul><li>some of SANS, GIAC, ISACA, (ISC)2 certificates or trainings - in good standing</li></ul>

Recommended industry certificates:

<ul><li>SANS, GIAC, ISACA, (ISC)2</li></ul></div>

CSOC Analyst L2

<div>Job responsibilities: 
<ul><li>Responsible for overall design, operation, maintenance and continuous improvement of the data, analytics and artificial intelligence platforms used by the Security Operations Center (further referenced as SOC). Responsibilities and duties are planned as follows:</li></ul>

<ul><li>Continuous maintenance of the data pipelines, analytics platforms and AI models used by the Security Operations Center; including data ingestion, normalization, feature extraction, model training and deployment.</li></ul>

<ul><li>Ensuring the overall health of the SOC data platform, analytics engines, machine learning models, and AI-assisted detection systems.</li></ul>

<ul><li>Manage verification, validation, tuning, and quality of security telemetry including logs, NetFlow/IPFIX, EDR data, threat intelligence feeds and other SOC data sources.</li></ul>

<ul><li>Develop, train, validate and tune machine learning and analytics models used for:</li></ul>

<ul><li>Anomaly detection</li></ul>

<ul><li>Threat classification</li></ul>

<ul><li>Behavioral analysis</li></ul>

<ul><li>Alert prioritization and risk scoring</li></ul>

<ul><li>Deploy and tune detection models and analytic use cases driven by security intelligence, threat hunting and incident response requirements.</li></ul>

<ul><li>Implement analytic use cases as required by Security Intelligence, Tier-2 and Tier-3 teams.</li></ul>

<ul><li>Manage and coordinate data source onboarding, integration, normalization, enrichment and troubleshooting for all SOC telemetry sources.</li></ul>

<ul><li>Manage access and permissions for data platforms, analytics environments and AI systems used by the SOC.</li></ul>

<ul><li>Ensure that security data sources are correctly feeding the analytics and AI platforms.</li></ul>

<ul><li>Generate analytical reports, dashboards and model outputs as required by SOC management, threat hunting and incident response teams.</li></ul>

<ul><li>Configuration, management, performance tuning and capacity planning of SOC data, analytics and AI platforms.</li></ul>

<ul><li>Support proof-of-concepts (POCs) for new SOC data sources, analytics techniques and AI-driven security capabilities.</li></ul>

<ul><li>Review vendor, open-source and research developments in security analytics, machine learning and AI relevant to SOC operations.</li></ul>

<ul><li>Should have good knowledge of systems, solutions and security tools and skills as follows:</li></ul>

<ul><li>Knowledge of MS Windows and UNIX-based systems.</li></ul>

<ul><li>Knowledge of data engineering and big-data platforms (data pipelines, stream processing, data lakes).</li></ul>

<ul><li>Knowledge of security telemetry including SIEM data models, NetFlow/IPFIX, EDR telemetry and threat intelligence formats.</li></ul>

<ul><li>Knowledge of machine learning and analytics techniques including anomaly detection, classification, clustering and statistical modeling.</li></ul>

<ul><li>Knowledge of AI-driven SOC technologies including LLM-based assistants, automated enrichment and detection analytics.</li></ul>

<ul><li>Familiarity with MITRE ATT&amp;CK, incident response lifecycle and threat hunting methodologies.</li></ul>

<ul><li>Problem-solving skills to identify data quality, detection gaps and model performance issues.</li></ul>

<ul><li>Communication with SOC teams (Tier-1, Tier-2, Tier-3) to align analytics and AI capabilities with operational needs.</li></ul>

<ul><li>Communication with vendors and data providers related to SOC analytics, telemetry and AI platforms.</li></ul>

Required certifications in:

<ul><li>Data engineering, analytics or AI platforms (Cloudera, Databricks, AWS, Azure, GCP, etc.)</li></ul></div>

CSOC Data Analyst L2

Al Adyat consultancy

Job Summary: The SOC Analyst Level 1 is responsible for monitoring, detecting, and responding to security events and incidents within the organization. The role involves analyzing alerts from various security tools, escalating incidents when necessary, and maintaining documentation of security activities. This is an entry-level position for candidates looking to start a career in cybersecurity.Key Responsibilities:<ul><li>Monitor security alerts and events from SIEM (Security Information and Event Management) and other security tools.</li><li>Perform initial triage and analysis of security incidents.</li><li>Escalate confirmed incidents to Level 2 or appropriate teams.</li><li>Maintain accurate incident documentation and logs.</li><li>Assist in vulnerability management and routine security checks.</li><li>Follow standard operating procedures (SOPs) for incident response.</li><li>Stay updated on the latest cybersecurity threats and trends.</li></ul>Qualifications:<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Technology, Cybersecurity, or a related field.</li><li>Basic understanding of networking, firewalls, intrusion detection/prevention systems, and endpoint security.</li><li>Familiarity with SIEM tools such as Splunk, QRadar, or ArcSight is a plus.</li><li>Strong analytical and problem-solving skills.</li><li>Good communication skills, both written and verbal.</li><li>Willingness to work in shifts (if SOC operates 24/7).</li></ul>Preferred Certifications (Optional):<ul><li>CompTIA Security+</li><li>Cisco CCNA Security</li><li>EC-Council CEH (Certified Ethical Hacker)</li></ul>Working Conditions:<ul><li>Shift-based work depending on SOC operational hours.</li><li>Fast-paced environment requiring attention to detail and quick response to incidents.</li></ul>Career Path: Successful SOC Analyst L1 can progress to SOC Analyst L2, then to SOC Analyst L3, Threat Hunter, or Incident Response Specialist roles.Job Type: Full-timePay: QAR10,000.00 - QAR13,000.00 per monthEducation:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>SOC Analyst Level 1 (L1): 3 years (Required)</li></ul>Language:<ul><li>Arabic (Required)</li><li>English (Required)</li></ul>License/Certification:<ul><li>degree in Computer Science, Information Technology (Required)</li></ul>Location:<ul><li>Doha (Required)</li></ul>

SOC Analyst Level 1 (L1)

<div>Job responsibilities: 
<ul><li>Responsible for overall secure operation, administration, maintenance of tools and solutions used by Security Operations Center (further referenced as SOC). Responsibilities and duties are planned as follows:</li></ul>

<ul><li>Continuous maintenance of the systems, tools and solutions, as well as any other attached systems used by Security Operations Center; including configuration management and system updates.</li></ul>

<ul><li>Ensuring the overall health of the SIEM system, ticketing system, and other SOC technology components.</li></ul>

<ul><li>Manage verification, validation, tuning, health and collection of Security logs.</li></ul>

<ul><li>Deploy and tune SIEM Use Cases and Rules driven by security intelligence inputs.</li></ul>

<ul><li>Implementing use cases as required by Security Intel teams.</li></ul>

<ul><li>Manage and coordinate equipment and system staging, on-boarding, deployment, configuration &amp; troubleshooting.</li></ul>

<ul><li>Manage user access including user and group permissions updates for all SOC infrastructure solutions.</li></ul>

<ul><li>Ensuring that log sources are reporting the SIEM platform.</li></ul>

<ul><li>Generating reports as required by SOC management teams.</li></ul>

<ul><li>Configuration, management, performance &amp; capacity planning of SOC solution/products.</li></ul>

<ul><li>Support for POCs for new CSOC technology and advanced capabilities to adopt/implement</li></ul>

<ul><li>Review CSOC solution/products vendor announcements.</li></ul>

<ul><li>Should have good knowledge of systems, solutions and security tools and skills as follows:</li></ul>

<ul><li>Knowledge about MS Windows and UNIX based systems</li></ul>

<ul><li>Knowledge of various Virtualization Environments.</li></ul>

<ul><li>Knowledge of Security Solutions like EDR, Email filtering, Vulnerability Scanners etc.</li></ul>

<ul><li>Familiarity with Active Directory, Kerberos, and authentication mechanisms</li></ul>

<ul><li>Problem-solving skills to identify issues with systems</li></ul>

<ul><li>Communication with other teams to resolve issues</li></ul>

<ul><li>Communication with vendors related to maintenance of the SOC Systems
</li></ul>Required certifications:

<ul><li>System administration (IBM, Microsoft, Vmware, Nutanix..etc.)</li></ul>

<ul><li>Industry certifications (CompTIA, ITIL 4 Foundation... Etc)</li></ul></div>

CSOC System Admin

Auxo Talent

<div>
 
 We are looking for a SOC Analyst &ndash; L1 to support 24/7 security operations within a telecom environment. The role focuses on real-time threat monitoring, alert triage, and initial incident response, with hands-on use of Splunk for log analysis and investigation.
 
 
 
 
 
 
 Key Responsibilities:
 
 
 <ul>
 <li>
 Monitor security alerts and logs using Splunk and other SOC tools
 </li>
 <li>
 Perform initial triage and validation of security incidents
 </li>
 <li>
 Execute basic incident response actions and escalate to L2/L3 when required
 </li>
 <li>
 Track and document incidents in ticketing systems
 </li>
 <li>
 Support monitoring of telecom network and IT systems (core, RAN, OSS/BSS)
 </li>
 <li>
 Prepare shift reports and ensure proper handover
 </li>
 </ul>
 
 
 Requirements:
 
 
 <ul>
 <li>
 1&ndash;3 years of experience in SOC / security monitoring
 </li>
 <li>
 Hands-on experience with Splunk
 </li>
 <li>
 Basic knowledge of networking and cybersecurity concepts
 </li>
 <li>
 Familiarity with telecom environments is a plus
 </li>
 <li>
 Willingness to work in a 24/7 shift environment
 </li>
 </ul>
 
 
 
 
 This is a 12 month contract, with potential to extend
 
</div>

Security Operations Analyst – L1

Saher Management Consultancies LLC

<div>
 
 Saher Manage
 
 ment is hiring for "
 
 Operations Architect
 
 ".
 
 
 
 
 
 Job Title:
 
 Operations Architect
 
 
 
 Location:
 
 Doha, Qatar
 
 
 
 Summary
 
 
 
 
 Operations Architect
 
 
 
 <ul>
 <li>
 Define and govern end-to-end operations architecture for cloud-native, multi-vendor platforms
 </li>
 <li>
 Ensure solutions are production-ready, scalable, secure, and highly available
 </li>
 <li>
 Establish observability frameworks (metrics, logs, traces, OpenTelemetry, dashboards, alerting)
 </li>
 <li>
 Define and manage SLOs, SLAs, OLAs, KPIs, and error budgets
 </li>
 <li>
 Design incident, problem, and change management processes aligned with ITIL
 </li>
 <li>
 Standardize runbooks, playbooks, and integrate workflows with ITSM tools (ServiceNow or equivalent)
 </li>
 <li>
 Implement release and deployment strategies (canary, rollback, feature flags)
 </li>
 <li>
 Define disaster recovery and BCP strategies (RPO/RTO, failover, DR testing)
 </li>
 <li>
 Drive capacity planning, performance engineering, and scaling strategies
 </li>
 <li>
 Integrate security operations (SIEM/SOAR, vulnerability and patch management)
 </li>
 <li>
 Implement FinOps practices (cost optimization, tagging, budgeting, chargeback)
 </li>
 <li>
 Lead operational readiness, production handover, and L1/L2/L3 enablement
 </li>
 <li>
 Collaborate with cloud, platform, security, and vendor teams across Azure, AWS, or GCP
 </li>
 <li>
 8+ years experience in SRE/DevOps/Operations | ITIL &amp; Cloud certifications preferred
 
 
 </li>
 </ul>
 Skills: management,azure,itil,operations
</div>

Operations Architect

Explore 29+ Csoc analyst l1 in Doha this April. Find roles across top companies and apply now to boost your career.