information security specialist Jobs in Doha

information security specialist

cyber security it/ot architect Jobs in Doha

cyber security it/ot architect

environmental specialist

managing consultant - cyber strategy & risk Jobs in Doha

managing consultant - cyber strategy & risk

procurement specialist

cyber security specialist

CLUSTER

<p>Our company is currently in need of an <b>Information Security Specialist</b> to join our team with the following skills and qualifications:</p><p>&middot; Bachelor's degree in Information Technology or Cyber &#8203;&#8203;Security</p><p>&middot; Professional Certifications Required + CompTIA Security: or CEH.</p><p>&middot; Desired Advanced Certifications: CISSP or CISM</p><p>&middot; At least 5 years of practical experience in the field of information security and cyber security.</p><p>&middot; Experience working with systems Firewalls, DLP, EDR, SIEM</p><p>&middot; Proficiency in Arabic and English (writing and speaking)</p><p>Note: Candidate must be in Qatar with transferable work visa</p><p><b>Basic Duties and Responsibilities:</b></p><p>&middot; Develop and implement the center's cybersecurity policies and procedures.</p><p>&middot; Managing security systems such as IDS/IPS, Firewalls, and Endpoint Protection (EDR) software</p><p>&middot; Monitor security activities, analyze alerts, and respond to incidents</p><p>&middot; Conduct periodic assessment of risks and security vulnerabilities</p><p>&middot; Manage and monitor access rights and protect sensitive accounts</p><p>&middot; Preparing monthly cybersecurity status reports (KPIs).</p><p>&middot; Participate in Business Continuity Plans and Disaster Recovery Plans (BCP/DR).</p><p>&middot; Educating employees about best security practices (periodic training)</p><p>Please direct copy of your latest CV to <b>hr@cluster.com.qa</b> and write the position you are eligible for in the subject line.</p><p>Job Type: Full-time</p><p>Pay: QAR4,000.00 - QAR5,000.00 per month</p>

Information Security Specialist

QatarEnergy

<div></div><div><p><b>Job Posting Date: </b>16 Oct 2025
</p><p><b>Work Location:</b> Doha, QA
</p><p><b>Company: </b>QatarEnergy LNG
</p><div><div><div><div><h2 class="jobSectionHeader"><b>Job Specification</b></h2>
</div><div><p>
Join our dedicated Cyber Assurance Team within the Information Risk Management Department. Reporting to the Cyber Assurance Lead, you will play a critical role in strengthening our organization's security posture.</p>
<p>
The Cyber Assurance team is responsible for proactively assessing and enhancing our security defenses. This involves conducting comprehensive ethical hacking activities and adversary simulations to identify potential vulnerabilities and control gaps. Your expertise will be vital in providing actionable recommendations to fortify our systems and ensure the resilience of our digital assets.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Job Purpose</b></h2>
</div><div><ul><li>Contribute to the implementation and continuous improvement of the organization's overall cyber strategy, ensuring the protection of information systems and data against cyber threats and vulnerabilities. Support the Cyber Assurance Lead in monitoring, enhancing, and maintaining the cyber assurance program within QatarEnergy LNG&rsquo;s Information Security organization.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Job Context &amp; Major Challenge(s)</b></h2>
</div><div><ul><li>Major challenges are,
<br>
(1) requires deep understanding of ethical hacking, penetration testing methodologies and offensive cybersecurity tactics
<br>
(2) supporting the Information Risk Management Division Manager in dealing with an increased cybersecurity risk due to the geopolitical situation
<br>
(3) contributing to the ongoing continuous improvement of SOC due to the current maturity level and the changing threat level
<br>
(4) keeping up to date with IT and OT Information Security and developments.
<br>
(5) keeping up to date with IT and OT Information Security regulatory requirements.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Key Job Accountabilities - I</b></h2>
</div><div><ul><li>Adversary emulation: Plan and execute full-scope red team engagements that mimic real-world threat actors, including initial access, privilege escalation, and lateral movement.</li>
<li>Phishing campaigns: Conduct advanced social engineering and targeted phishing campaigns that bypass modern email gateways.</li>
<li>Technical assessments: Perform thorough assessments of complex production environments, including network infrastructure, cloud services, and applications.</li>
<li>Malware development and EDR bypass: Develop custom malware, exploits, and post-exploitation tools designed to evade detection by Endpoint Detection and Response (EDR) and other security controls.</li>
<li>C2 infrastructure management: Deploy, manage, and operate command-and-control (C2) frameworks such as Cobalt Strike, Brute Ratel C4, and Nighthawk C2.</li>
<li>Operational security (OpSec): Maintain strict OpSec discipline to ensure all red team activities remain covert and undetected by defensive teams.</li>
<li>Research and development (R&amp;D): Conduct offensive security research to stay current with the latest tactics, techniques, and procedures (TTPs) and develop new tools and methodologies.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Key Job Accountabilities - II</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Person Specification - Minimum Requirement</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Qualifications</b></h2>
</div><div><ul><li>Bachelor&rsquo;s degree level in information security, computer science or engineering.</li>
<li>Professional certifications in information security management and standards (e.g., OSCP, OSCE, CRTP, CRTO, CRTL, etc.).</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Knowledge and/or Experience - I</b></h2>
</div><div><ul><li>8+ years of experience in <b>Offensive Security / Red Teaming</b></li>
<li>Broad knowledge of current techniques and practices associated with development and service provision and is a recognized specialist in at least one area.</li>
<li>Understands the main strategic and commercial issues facing IT and safety and availability expectations from OT and the Organization&rsquo;s management and a good understanding of the principles of management and control.</li>
<li>Possesses good understanding of and practices according to a professional code of conduct and code of ethics.</li>
<li>Possesses a good understanding of IT/OT business applications.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Technical and Business Skills - I</b></h2>
</div><div><ul><li>Ability to assess and evaluate risk and the impact of legislation, and actively promotes compliance.</li>
<li>Builds a good rapport and strategic relations with the OT OEM community and with the QatarEnergy LNG operation leads.</li>
<li>Ability to deal effectively with stakeholders at all levels.</li>
<li>Demonstrates integrity, objectivity and impartiality.</li>
<li>Analytical skills.</li>
<li>Applies pragmatic judgement in the application of rules.</li></ul></div></div></div></div></div><p></p>

Cyber Assurance Specialist

<div></div><div><p><b>Job Posting Date: </b>15 Oct 2025
</p><p><b>Work Location:</b> Doha, QA
</p><p><b>Company: </b>QatarEnergy LNG
</p><div><div><div><div><h2 class="jobSectionHeader"><b>Job Specification</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Job Purpose</b></h2>
</div><div><p>
Safeguarding the organization&rsquo;s IT and OT environments by detecting, investigating, and proactively hunting for cyber threats. The role bridges intelligence and operations, turning threat data into actionable detections and hunt activities. Working closely with SOC Team, the specialist enhances detection capabilities and strengthens the organization&rsquo;s overall cyber resilience.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Job Context &amp; Major Challenge(s)
</b></h2></div><div><p>Major challenges are,</p>
<p>
(1)Keeping pace with evolving threat landscape as attackers develop new techniques and strategies.</p>
<p>
(2)Thorough understanding of security operations centre (SOC) 24x7</p>
<p>
(3) supporting the Information Risk Management Division Manager in dealing with an increased cybersecurity risk due to the geopolitical situation</p>
<p>
(4) Contributing to the ongoing continuous improvement of SOC due to the current maturity level and the changing threat level</p>
<p>
(5) Keeping up to date with IT and OT cyber threats to stay ahead of such threats.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Key Job Accountabilities - I</b></h2>
</div><div><ul><li>Perform proactive threat hunting across IT and OT networks using intelligence from the Threat Analyst to uncover stealthy or undetected threats.</li>
<li>Analyse and correlate security incidents to understand attacker behaviour, techniques, and campaign patterns beyond simple alerts.</li>
<li>Bridge threat intelligence with detection logic, translating new IOCs, TTPs, and adversary trends into actionable detection content for the SOC Engineer to implement.</li>
<li>Conduct deep-dive investigations on high-severity alerts, ensuring accurate root cause determination and actionable recommendations.</li>
<li>Support incident response teams during containment and eradication phases by providing context on attacker tools, tactics, and infrastructure.</li>
<li>Collaborate with the SOC Engineer to refine SIEM use cases, detection rules, and SOAR playbooks based on threat hunting outcomes.</li>
<li>Perform malware reverse engineering and behavioural analysis, extracting IOCs, YARA rules and technical findings to feed into threat hunting and detection development.</li>
<li>Develop and maintain threat profiles for key adversaries and attack scenarios targeting both IT and OT environments.</li>
<li>Prepare technical briefings reports summarizing threat findings and lessons learned for management.</li>
<li>Continuously improve analytical techniques, staying current with emerging threats, tools, and frameworks like MITRE ATT&amp;CK.</li>
<li>Ensure alignment with legal and ethical guidelines to ensure team activities are authorized and do not compromise company&rsquo;s integrity or reputation.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Person Specification - Minimum Requirement</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Qualifications</b></h2>
</div><div><ul><li>Bachelor degree level in information security, computer science or engineering.</li>
<li>Holds a relevant professional certification such as (e.g., GCTI, GCIA, GCIH, GREM).</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Knowledge and/or Experience
</b></h2></div><div><ul><li>10 years Information Security experience in a similar position.</li>
<li>Proven experience in cyber threat analysis, hunting, and incident investigation across both IT and OT environments.</li>
<li>Strong understanding of network protocols, malware behaviour, and adversary TTPs aligned with the MITRE ATT&amp;CK framework.</li>
<li>Experience with SIEM/SOAR platforms, threat intelligence tools, and log analysis for advanced threat detection.</li>
<li>Strong analytical and investigative skills with hands-on experience in threat hunting.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Technical and Business Skills</b></h2>
</div><div><ul><li>Ability to assess and evaluate risk and the impact of legislation and actively promotes compliance.</li>
<li>Possesses a good understanding of IT and OT business applications.</li></ul></div></div></div></div></div><p></p>

Cyber Threat Specialist

<div></div><div><p><b>Job Posting Date: </b>16 Oct 2025
</p><p><b>Work Location:</b> Doha, QA
</p><p><b>Company: </b>QatarEnergy LNG
</p><div><div><div><div><h2 class="jobSectionHeader"><b>Job Specification</b></h2>
</div><div><p>
Join our dedicated Cyber Assurance Team within the Information Risk Management Department. Reporting to the Cyber Assurance Lead, you will play a critical role in strengthening our organization's security posture.</p>
<p>
The Cyber Assurance team is responsible for proactively assessing and enhancing our security defenses. This involves conducting comprehensive ethical hacking activities and adversary simulations to identify potential vulnerabilities and control gaps. Your expertise will be vital in providing actionable recommendations to fortify our systems and ensure the resilience of our digital assets.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Job Purpose</b></h2>
</div><div><ul><li>Contribute to the effectiveness of the organization&rsquo;s cyber defence by identifying risks, evaluating controls, and supporting the protection of information systems and data from cyber threats and vulnerabilities. Deliver and enhance key components of the cyber assurance program within QatarEnergy LNG&rsquo;s Information Security organization.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Job Context &amp; Major Challenge(s) - I</b></h2>
</div><div><ul><li>Major challenges:
<br>
(1) requires deep understanding of ethical hacking, penetration testing methodologies and offensive cybersecurity tactics
<br>
(2) supporting the Information Risk Management Division Manager in dealing with an increased cybersecurity risk due to the geopolitical situation
<br>
(3) contributing to the ongoing continuous improvement of SOC due to the current maturity level and the changing threat level
<br>
(4) keeping up to date with IT and OT Information Security and developments.
<br>
(5) keeping up to date with IT and OT Information Security regulatory requirements.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Key Job Accountabilities - I</b></h2>
</div><div><ul><li>Develop Attack Scenarios: Based on CTI and threat actor Tactics, Techniques, and Procedures (TTPs), create realistic and impactful threat simulation scenarios.</li>
<li>Configure and Deploy Security Tools: Set up, configure, and run automated security scanning tools, such as vulnerability scanners and web application security scanners.</li>
<li>Analyze Scan Results: Interpret findings from automated scans to identify potential vulnerabilities and weaknesses that could be exploited in a simulation.</li>
<li>Perform Phishing Simulations: Design, execute, and analyze targeted phishing campaigns to test the human element of security and measure employee awareness.</li>
<li>Collaborate for Defense Improvement: Work with blue teams to share insights on attack methodologies, improve detection capabilities, and enhance overall security posture.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Person Specification - Minimum Requirement</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Qualifications</b></h2>
</div><div><ul><li>Bachelor&rsquo;s degree level in information security, computer science or engineering.</li>
<li>Professional certifications in information security management and standards (e.g., OSCP, CRTP, CRTO, OSWE, etc.)</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Knowledge and/or Experience - I</b></h2>
</div><div><ul><li>5+ years of experience in <b>Offensive Security / Red Teaming
</b></li><li>Broad knowledge of current techniques and practices associated with development and service provision and is a recognized specialist in at least one area.</li>
<li>Understands the main strategic and commercial issues facing IT and safety and availability expectations from OT and the Organization&rsquo;s management and a good understanding of the principles of management and control.</li>
<li>Possesses good understanding of and practices according to a professional code of conduct and code of ethics.</li>
<li>Possesses a good understanding of IT/OT business applications.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Technical and Business Skills - I</b></h2>
</div><div><ul><li>Ability to assess and evaluate risk and the impact of legislation, and actively promotes compliance.</li>
<li>Builds a good rapport and strategic relations with the OT OEM community and QatarEnergy LNG Operation Leads.</li>
<li>Ability to deal effectively with stakeholders at all levels.</li>
<li>Demonstrates integrity, objectivity and impartiality.</li>
<li>Analytical skills.</li>
<li>Applies pragmatic judgement in the application of rules.</li></ul></div></div></div></div></div><p></p>

Senior Analyst Cyber Assurance

<div>
 <strong>
  Primary Purpose Of The Job
  <br/>
  <br/>
 </strong>
 Responsible for leading the Offensive red teaming activities on QatarEnergy&rsquo;s IT/OT environments, by conducting threat hunting, penetration testing, Vulnerability scanning and security assurance activities. Provides oversight and technology guidance as well as managerial support as required. Oversee the execution of incident management program and supervises and coordinates engineers and external consultants to design, build and manage QatarEnergy SOC Red team functions on QatarEnergy&rsquo;s IT and OT cyber security mission critical operational expansion.
 <br/>
 <br/>
 <strong>
  Required Experience And Skills
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Strong understanding of cyber incident management, malware management and vulnerability management processes.
  </li>
  <li>
   Solid knowledge on Malware analysis, Vulnerability assessment &amp; Forensic &amp; memory analysis, and data analytics
  </li>
  <li>
   Experience with large ICS &amp; ICT environments in the Energy sector is a big plus.
  </li>
  <li>
   Advanced knowledge of networking fundamentals (TCP/IP, network layers, Ethernet, etc) Advanced knowledge of current threat landscape (threat actors, APT, cyber-crime, etc) Advanced knowledge of penetration techniques and forensic techniques. Protocol analysis knowledge and experience (Wireshark, Netwitness, etc.) Solid knowledge of client-server applications, multi-tier web applications, relational databases.
  </li>
  <li>
   Solid knowledge and experience with Cloud technologies (Amazon, Azure, Google Cloud, IaaS, SaaS etc.)
  </li>
  <li>
   Good knowledge of IT including multiple operating systems and system administration skills (Windows, Unix)
  </li>
  <li>
   Solid understanding of IT governance and processes, such as ITIL, COBIT.
  </li>
  <li>
   Possession of Industry Certifications ISACA, GCIA, SANS, ICS2, EC-Council, other relevant cyber security certifications. (such as CISSP, CISM, (GCIH), (GIAC), (CEH), (CEPT), OSCE, CHFI, GREM or equivalent security technologies technical certification (Advanced Level)
  </li>
  <li>
   Must maintain professional demeanor in stressful situations.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Educational Qualifications
  <br/>
  <br/>
 </strong>
 Bachelor&rsquo;s degree in information security, computer science, or systems engineering. 10+ years of technical experience in Information Security, System Administration, or Network Engineering with at least 5 years of experience in Information Security.
</div>


PENETRATION TEST ANALYST

Cognizant Technology Solutions

<div><p><b>Job Description:</b></p><ul><li>Advanced capabilities on Application Security and technologies thereof.</li><li>Advanced capabilities on Network Security and technologies thereof.</li><li>Proficiency on Endpoint Security capabilities.</li><li>Good understanding on Change and Patch management for a large organisation.</li><li>Security Monitoring and Operations capabilities</li><li>Incidence handling, forensic analysis and evidence handling capabilities.</li><li>Identity and Access governance and management technical capabilities.</li><li>Cloud Security Experience with Aviation Cyber Security Frameworks</li><li>Experience with managing Cyber Security over a large geographically dispersed technology environment</li></ul><p><b>
One or more of the following certifications:</b></p><ul><li>Certified Information Systems Auditor (CISA),</li><li>Certified Information Systems Manager (CISM),</li><li>Certified Information Systems Security Professional (CISSP)</li><li>Certified in Risk and Information Systems Control (CRISC)</li><li>Certified Ethical Hacker (CEH)</li></ul><p><b>
About Cognizant:</b></p><p>
Cognizant (Nasdaq: CTSH) engineers modern businesses. We help our clients modernize technology, reimagine processes and transform experiences so they can stay ahead in our fast-changing world. Together, we're improving everyday life. See how at www.cognizant.com or @cognizant.</p><p>
#LI-CTSAPAC</p></div>

Cyber Security

<div>
 <strong>
  Introduction
  <br/>
  <br/>
 </strong>
 The IBM security consulting team provides customized solutions for our clients, not point solutions or basic product installation. The Managing Consultant will work with our clients to understand their specific business issues, both internally and externally and provide solutions to solve specific business issues for our clients. They will be able to look at our client&rsquo;s issues and work with other senior IBM consultants to provide guidance on a systematic approach to solve these within our client&rsquo;s budget and timeframe.
 <br/>
 <br/>
 The Managing Consultants will provide subject matter expertise in the form of workshops, and consulting engagements, which assess a client&rsquo;s security capabilities, which could be in the policy, process, technology or organizational areas, identify gaps and recommend cost effective best practices to reduce client risk and increase their handle on security risk. Having hands on implementation experience is a requirement of this position as well at deep technical knowledge of Security Governance tools. The Senior Consultant will assist in pre-sales, sales, closure, and then organizing the delivery of security consulting services with local teams.
 <br/>
 <br/>
 <strong>
  Your Role And Responsibilities
  <br/>
  <br/>
 </strong>
 The IBM security consulting team provides customized solutions for our clients, not point solutions or basic product installation. The Managing Consultant will work with our clients to understand their specific business issues, both internally and externally and provide solutions to solve specific business issues for our clients. They will be able to look at our client&rsquo;s issues and work with other senior IBM consultants to provide guidance on a systematic approach to solve these within our client&rsquo;s budget and timeframe.
 <br/>
 <br/>
 The Managing Consultants will provide subject matter expertise in the form of workshops, and consulting engagements, which assess a client&rsquo;s security capabilities, which could be in the policy, process, technology or organizational areas, identify gaps and recommend cost effective best practices to reduce client risk and increase their handle on security risk. Having hands on implementation experience is a requirement of this position as well at deep technical knowledge of Security Governance tools. The Senior Consultant will assist in pre-sales, sales, closure, and then organizing the delivery of security consulting services with local teams.
 <br/>
 <br/>
 <strong>
  Required Technical And Professional Expertise
  <br/>
  <br/>
 </strong>
 Security Domain Skills
 <br/>
 <br/>
 <ul>
  <li>
   This position requires knowledge across multiple platforms, processes or architectures. This position requires security consulting skills and the ability to act as a trusted client advisor and a trusted technical lead for the team. The Managing Consultant will need to have skills to be able to work with other IBM teams and:
  </li>
  <li>
   Deliver strategic security advisory services
  </li>
  <li>
   A proven record of security thought leadership and be recognized for business and technical acumen Cyber Strategy and Risk services
  </li>
  <li>
   Depth of knowledge in one or more of the core security areas in Cyber Strategy and Risk such as Security Architecture/Cloud Security/ OT Security/ SAP Security/e-GRC.
  </li>
  <li>
   Hands on experience and understanding of compliance (ISO 27001, NCA, SOC 2, COBIT, NIST, PCI DSS, GDPR etc) and Regulatory requirements.
   <br/>
   <br/>
  </li>
 </ul>
 Core consulting skills
 <br/>
 <br/>
 <ul>
  <li>
   Strong communication and presentation skills
  </li>
  <li>
   The ability to lead large groups and be a primary facilitator and lead.
  </li>
  <li>
   Strong written skills
  </li>
  <li>
   Comfortable working in a project based / client serving model
  </li>
  <li>
   Ability to lead and shape client expectations
  </li>
  <li>
   Help drive pursuits and engage in complex deals, matching outcomes to expectations
  </li>
  <li>
   Ability to work easily with diverse and dynamic teams
  </li>
  <li>
   Ability to work in a matrix management model
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Technical And Professional Experience
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   At least 5 years relevant consulting experience in Cyber Strategy and Risk domain
  </li>
  <li>
   Security consulting experience across multiple client verticals, including Financial Services, Public Sector, Technology, Telecommunications, Manufacturing, Industrial &amp; Mining etc.
  </li>
 </ul>
</div>


Managing Consultant - Cyber Strategy & Risk

Explore 416+ Cyber security specialist in Doha this November. Find roles across top companies and apply now to boost your career.