accident investigation engineer (roads o&m)

business analyst

data analyst

agency operations coordinator Jobs in Doha

agency operations coordinator

accident investigation engineer (roads o&m) Jobs in Doha

accounts analyst

incident response analyst

Naufar

<div>
 
 
 JOB PURPOSE:
 
 
 
 The Cyber Security Analyst creates a comprehensive program for establishing a Healthcare carrier-class Security Operation Center. S/he develop and maintain threat monitoring and security incident response procedures within Naufar. The analyst designs frameworks, procedures, and toolkits to enhance capabilities in professional forensic collection and digital evidence analysis. S/he also develop dashboards for reporting the organization's threat landscape, Awareness and security posture to senior management. This role is expert role with roles and responsibilities.
 
 
 
 
 
 
 Description
 
 
 <ul>
 <li>
 Develops and implements a cyber-security program to enhance Naufar capabilities regarding Cyber Attack incident monitoring, incidents response and intrusive and non-intrusive forensics capabilities.
 </li>
 <li>
 Develops and matures the service capabilities of the SOC, such as Forensics, Threat Management, Penetration Assessments, and Tool Management.
 </li>
 <li>
 Develops, Contributes and maintains of the cyber security strategy.
 </li>
 <li>
 Implements, configures and maintains security control and process, to ensure threat indicators are rated by severity and responded to in a manner consistent with the threat.
 </li>
 <li>
 Identifies deficiencies and recommends corrective action to strengthen information security control and decrease the risk of data breach.
 </li>
 <li>
 Maintains and updates standard operation policies and procedures for incident response plans, e-discovery processing, remote acquisition/analysis tools, collections and forensic analysis techniques.
 </li>
 <li>
 Maintains industry standard tools and processes used for forensic analysis and eDiscovery collections and processes.
 </li>
 <li>
 Monitors security alerts for potential events/incidents as well as trending and historical analysis and ensuring all incident reports are complete and written within standard operations and ensures ticket audits and reviews are completed
 </li>
 <li>
 Utilizes leading forensic software to identify, collect, preserve and analyze electronic data from laptops, desktops, servers, email archives, infrastructure logs, network file servers, backup tapes, cell phones, PDAs and a wide variety of other media devices.
 </li>
 <li>
 Manages requests for electronic data and digital forensic investigations that relate to Litigation, Regulatory matters, Compliance, and Employee Investigations.
 </li>
 <li>
 Performs cybersecurity incident analysis and assist with incident response, including analysis of network content and metadata for investigations or malware detection and identifies the cause and extent of a breach.
 </li>
 <li>
 Serves as a subject matter expert and technical advisor in matters relating to the proper collection, preservation, packaging, and submission of digital and multimedia evidence.
 </li>
 <li>
 Participates in incident electronic evidence collection activities in major field investigations. Ensures evidence handling requirements are met.
 </li>
 <li>
 Performs post-incident report according to standard operations.
 </li>
 <li>
 Analyzes the tools and methodology used for investigation and accordingly presents improvements in control and corrective actions if any.
 </li>
 <li>
 Escalates and works with senior management on resolutions to overdue security items or any negative trends identified.
 </li>
 <li>
 Develops focused reporting and briefings for advanced cyber threats.
 </li>
 <li>
 Conducts studies and research for improving forensic analyses, scientific methods, and resolving forensic examination problems.
 </li>
 <li>
 Creates detailed, professional documentation and reports, including performance metrics and presentations for management.
 </li>
 <li>
 Leads or contributes to key projects related to corporate threat monitoring, forensics or information security initiatives.
 </li>
 <li>
 Facilitates group risk assessment activities and identifies any security-related process improvement opportunities.
 </li>
 <li>
 Monitors and performs trending on root cause analysis activities within assigned group and participates as needed to resolve clinical systems security related incidents.
 </li>
 <li>
 Assists on monitoring compliance with information security policies, standards and ENTERPRISE-WIDE strategy and facilitates threat and vulnerability evaluations on a regular basis. Measures and reports on the effectiveness of information security controls.
 </li>
 <li>
 Supports the security initiatives, corrective and preventative actions, and security measures by ensuring timely updates and escalating concerns and non-compliances.
 </li>
 <li>
 Understands and maintains the appropriate knowledge of Security Technologies, (Firewall, Anti-Virus, Email and Web Encryption, HIPS, NIPS, SIEM, WAF, DLP), security procedures, and services within Naufar IT Security as well as ensures all tools are functioning properly.
 </li>
 <li>
 Keeps up to date on changes to significant regulatory and applicable standards issued by internal or external agencies, as applicable to the Naufar&rsquo;s domain.
 </li>
 <li>
 Adheres to Naufar&rsquo;s standards as they appear in the Code of Conduct and Conflict of Interest policies
 </li>
 </ul>
 
 
 
 
 
 Academic Qualifications:
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree &ndash; IT - Mandate
 </li>
 <li>
 Master&rsquo;s degree &ndash; Cybersecurity - Desired
 </li>
 </ul>
 
 
 
 
 
 Experience Requirements:
 
 
 <ul>
 <li>
 5+ years of experience working as a security analyst or SME within a Security Operations Center with exposure to cyber security collection, analysis and threats management, investigation and digital forensics.
 </li>
 <li>
 Demonstrated experience in threat detection and analysis, incident response, and reporting.
 </li>
 <li>
 Demonstrated experience with incident response, deep dive forensics, insider threat, cyber and data exfiltration incidents.
 </li>
 <li>
 Demonstrated experience conducting assessments, digital forensic investigations, vulnerability management and incident response.
 </li>
 <li>
 Demonstrated experience with current cyber threats and the associated tactics, techniques, and procedures used to infiltrate computer networks.
 </li>
 <li>
 Demonstrated experience with SEIM products in the detection, response, mitigation, and/or reporting of cyber threats
 </li>
 <li>
 Demonstrated experience in the use of forensic tools (e.g. FTK, Encase, Forensic Toolkit, X-Ways, Linux based tools, etc.)
 </li>
 <li>
 Experienced with (or equivalent) the following regulations and frameworks: PCI, HIPAA, and ISO/IEC 2700x
 </li>
 </ul>
</div>

Cyber Security Analyst

malomatia

<div>
 
 Job Description
 
 
 
 <ul>
 <li>
 Operate within SOC environment, to Analyze alerts and log data promptly and effectively. Assess the severity and impact of potential threats to accurately prioritize alerts and incidents.
 </li>
 <li>
 Monitor and analyze security information and event management (SIEM) tools like Microsoft Sentinel to identify potential security incidents and anomalies.
 </li>
 <li>
 Conduct in-depth analysis of security events, collaborating directly with customers to escalate and thoroughly investigate incidents. This involves understanding the scope, impact, and root cause of incidents to tailor the response effectively.
 </li>
 <li>
 Execute swift containment and remediation measures for identified security incidents, employing predefined response strategies to isolate affected systems and prevent further compromise.
 </li>
 <li>
 Proactively participate in the creation and enhancement of processes and procedures such as Security Playbooks.
 </li>
 <li>
 Refine and optimize analytical rules within the Sentinel SIEM platform to reduce false positive alerts, enhancing the accuracy and efficiency of threat detection.
 </li>
 <li>
 Assist in vulnerability assessments and penetration testing activities. Evaluate and prioritise identified vulnerabilities for remediation by collaborating directly with customers.
 </li>
 <li>
 Maintain accurate records of incidents, investigations, and security-related activities within the incident management platform.
 </li>
 <li>
 Create detailed reports on security incidents, response actions taken, and recommendations for improvement.
 </li>
 <li>
 Research new concepts and present them to the internal team as well as customers.
 </li>
 <li>
 Security monitoring experience with one or more SIEM technologies, preferably Microsoft Sentinel. Knowledge of EDR solutions including Microsoft Defender.
 </li>
 <li>
 Strong understanding of Windows, Linux and cloud technologies including Microsoft Azure and Office365.
 </li>
 <li>
 Good understanding of security solutions including SIEMs, Web Proxies, Anti-Virus, Firewalls, VPN, authentication providers and mechanisms, encryption, IPS/IDS.
 </li>
 <li>
 Strong understanding of networking principles including TCP/IP, WANs, LANs, and commonly used Internet protocols.
 </li>
 <li>
 The candidate must hold a degree in Computer Science, Information Security, or a related field, along with Microsoft Security Operations Analyst certification.
 </li>
 </ul>
</div>

Associate SOC L1 Analyst

Cartafella Analytics

We are looking for SOC Senior Analyst for Qatar location.<ul><li>Exposure to IT service management best practices such as ITIL and ISO27001</li><li>12+ years in SOC/IR/Digital Forencis preferable in MSSP.</li><li>Experience in ISO27001 process and procedures and can work on their own with little supervision</li><li>A good communicator at all levels.</li><li>A sound knowledge of IT security best practices, common attack types and detection / prevention methods.</li><li>Strong written and verbal communication skills</li><li>Attention to detail and great organisational skills</li><li>An active interest in Cyber Security, incident detection, network and systems security.</li><li>Experience or qualifications in network and systems monitoring</li><li>Experience in successful implementation / exposure / participation of a Business Continuity and Disaster Recovery Program</li><li>Experience in performing risk assessments and managing information security risks of an organization</li><li>University degree in any field related to Information Technology</li><li>Minimum 6+ years&rsquo; experience focused in the IT Security field (e.g. Incident Response, Incident Investigation, Incident Remediation)</li><li>Practical experience using SIEM platforms, preferably Google SecOps / Google Chronicle, including:</li><li>Maintain organization&rsquo;s compliance to various security standards such as ISO 27001/02, National Information Assurance Policy - Qatar</li></ul>Certification<ul><li>Certified Ethical Hacker</li><li>Certified Incident Responder Credentials from GIAC/SANS</li><li>Security+</li><li>CCSP / CCSE</li><li>Google SecOps</li></ul>If you are available, please send your cv immediatelyPay: Up to QAR2,000.00 per monthWork Location: In person

SOC Senior Analyst for Qatar

Madre Integrated Engineering

We are seeking a Cybersecurity Incident Response Specialist to manage and respond to security incidents across the organization. The role focuses on detecting threats, analyzing security events, and executing effective response strategies to protect systems, data, and infrastructure.Key Responsibilities:<ul><li>Identify, analyze, and respond to security incidents and unauthorized access attempts in real-time.</li><li>Lead containment and eradication efforts to minimize the impact of cyber threats.</li><li>Conduct threat hunting and proactive security monitoring.</li><li>Prepare detailed technical reports and provide actionable security recommendations.</li><li>Investigate security incidents including malware infections, phishing attacks, unauthorized access, and data breaches.</li><li>Lead incident response lifecycle: detection, analysis, containment, eradication, and recovery.</li><li>Perform digital forensics and root cause analysis to prevent recurrence.</li><li>Develop and maintain incident response playbooks and procedures.</li><li>Collaborate with SOC, IT, and network teams for coordinated response.</li></ul>Requirements:<ul><li>Should have relevant experience in IT infrastructures or network security.</li><li>Candidates with OSCP, CRTO, GCTI, CISSP, or CISM certifications are preferred .</li><li>Knowledge of frameworks such as NIST, MITRE ATT&amp;CK, and ISO 27001.</li><li>Experience in network security, endpoint security, and incident investigation.</li><li>Familiarity with scripting (Python, PowerShell, or Bash) is an advantage.</li><li>Relevant certifications such as CEH, GCIH, CISSP, or similar are preferred.</li><li>Strong analytical, problem-solving, and communication skills.</li><li>Ability to work in a fast-paced environment and handle critical incidents.</li></ul>Location: QatarJob Type: Full-timeWork Location: On the road

Cybersecurity Incident Response Specialist

QatarEnergy

<div>
 
 Primary Purpose Of The Job
 
 
 
 Act as a SME subject matter expert in Cyber Security team to provide proactive support to detect, distinguish, isolate, interrupt, suppress, advanced threats that evade existing security solutions. Responsible for handling cyber security incident response activities for QatarEnergy&rsquo;s IT and OT / Industrial areas on a 24/7 basis. Provide real-time hands-on incident management support throughout all stages of the cyber security incident lifecycle. Use state-of-the-art tools to analyse and investigate incidents and take immediate action or recommend a course of action to safeguard QatarEnergy.
 
 
 
 Required Experience And Skills
 
 
 
 10+ years&rsquo; experience working in a large-scale IT environment with focus on Information Security, and knowledge of Operational Technology.
 
 
 <ul>
 <li>
 6+ years previous Security Operations Centre Experience in conducting security investigations.
 </li>
 <li>
 Strong understanding of security incident management, malware management processes.
 </li>
 <li>
 Proven track record and demonstrated relevant experience as a key member of an incident response, malware analysis, or similar role.
 </li>
 <li>
 Advanced knowledge on Anti-Malware, Vulnerability Management, Intrusion Detection/Protection, Perimeter Security, Security Incident Management, Security Information and Event Management (SIEM), Penetration Testing (application, network, host, social).
 </li>
 <li>
 Strong understanding and experience combatting crime-ware or APT is a distinguishing factor.
 </li>
 <li>
 Strong understanding of networking principles including TCP/IP, WANs, LANs, and commonly used Internet protocols such as SMTP, HTTP, FTP, POP, LDAP. Demonstrated knowledge of security related technologies and their functions (IDS, IPS, FW, WAF, SIEM and the like).
 
 
 </li>
 </ul>
 
 Educational Qualifications
 
 
 
 Bachelor&rsquo;s degree in information security, computer science, or systems engineering.
</div>

SR. CYBER SECURITY INCIDENT RESPONDER

PROZ TECHNOLOGIES

Job Title: SOC L2 Analyst (OT Security) Location: Doha, Qatar (On-site)About the RoleWe are looking for an experienced SOC L2 Analyst to join a leading Security Operations Center (SOC) team in Qatar. The role focuses on advanced threat monitoring, incident investigation, and response across both IT and Operational Technology (OT) environments.This is an excellent opportunity for cybersecurity professionals with strong SIEM and incident handling experience, especially those with exposure to industrial/OT security systems.Key Responsibilities<ul><li>Investigate and analyze security alerts and incidents, including escalations from L1 analysts</li><li>Perform in-depth threat analysis across IT and OT environments</li><li>Act as an incident responder for security events and recommend remediation actions</li><li>Monitor and manage SIEM alerts, logs, and SOC tickets within SLA timelines</li><li>Escalate critical incidents to L3/Senior Analysts when required</li><li>Support and mentor junior SOC analysts (L1)</li><li>Collaborate with internal teams to improve threat detection and response capabilities</li><li>Contribute to SOC documentation, runbooks, and knowledge base</li></ul>Required Skills &amp; Experience<ul><li>Minimum 5+ years of experience in SOC / Cybersecurity operations</li><li>Strong experience with SIEM tools (Splunk, QRadar, ArcSight, Azure Sentinel, etc.)</li><li>Hands-on experience in incident detection, investigation, and response</li><li>Strong knowledge of network security, logs, and attack patterns</li><li>Experience with security tools such as EDR, IDS/IPS, Firewalls, Vulnerability Scanners</li><li>Familiarity with MITRE ATT&amp;CK framework</li><li>Good understanding of Windows, Linux, and network environments</li></ul>Preferred (Nice to Have)<ul><li>Experience with OT / ICS / SCADA security environments</li><li>Knowledge of protocols like Modbus, DNP3, BACnet</li><li>Exposure to industrial cybersecurity frameworks</li><li>Basic scripting knowledge (Python, PowerShell, Bash)</li></ul>Certifications (Preferred)<ul><li>SC-200, GCIH, CEH, or equivalent cybersecurity certifications</li><li>SIEM certifications (Splunk, Azure Sentinel, etc.)</li><li>OT Security certifications (e.g., Nozomi) are a plus</li></ul>Ideal Candidate<ul><li>SOC L2 Analyst / Senior Security Analyst</li><li>Experience working in MSSP or enterprise SOC environments</li><li>Strong analytical and problem-solving skills</li><li>Ability to work in a 24x7 SOC environment</li></ul>Job Type: PermanentPay: Up to QAR15,000.00 per monthWork Location: In person

SOC L2 Analyst (OT Security)

Role: Senior Cyber Security Incident ResponderLocation: Doha, Qatar (QatarEnergy)Key Purpose: Lead advanced incident response for IT &amp; OT systems, investigate threats, and protect critical infrastructure.Experience: 10+ years IT security, 6+ years SOC/IR experienceTools/Tech: SIEM, IDS/IPS, anti‑malware, network securityEducation: Bachelor&rsquo;s in Cybersecurity / Computer ScienceThe Senior Cyber Security Incident Responder is a subject‑matter expert in QatarEnergy&rsquo;s Cyber Security team responsible for proactively detecting, analysing, and responding to advanced cyber threats targeting both IT networks and Operational Technology (OT) environments (like industrial control systems).This role works 24/7 to handle incident response activities throughout the entire lifecycle &mdash; from detection and containment to mitigation and recovery &mdash; often using advanced tools and methods to protect critical infrastructure.Pay: From QAR33,000.00 per monthWork Location: In person

Sr. Cyber Security Incident Responder (QatarEnergy)

Explore 211+ Incident response analyst in Doha this May. Find roles across top companies and apply now to boost your career.