application operations center (aoc) engineer

business analyst

ai solutions architect

application operations center (aoc) engineer Jobs in Doha

associate, information security audit Jobs in Doha

associate, information security audit

business analyst (ict governance) Jobs in Doha

business analyst (ict governance)

incident response analyst

Naufar

<div>
 
 
 JOB PURPOSE:
 
 
 
 The Cyber Security Analyst creates a comprehensive program for establishing a Healthcare carrier-class Security Operation Center. S/he develop and maintain threat monitoring and security incident response procedures within Naufar. The analyst designs frameworks, procedures, and toolkits to enhance capabilities in professional forensic collection and digital evidence analysis. S/he also develop dashboards for reporting the organization's threat landscape, Awareness and security posture to senior management. This role is expert role with roles and responsibilities.
 
 
 
 
 
 
 Description
 
 
 <ul>
 <li>
 Develops and implements a cyber-security program to enhance Naufar capabilities regarding Cyber Attack incident monitoring, incidents response and intrusive and non-intrusive forensics capabilities.
 </li>
 <li>
 Develops and matures the service capabilities of the SOC, such as Forensics, Threat Management, Penetration Assessments, and Tool Management.
 </li>
 <li>
 Develops, Contributes and maintains of the cyber security strategy.
 </li>
 <li>
 Implements, configures and maintains security control and process, to ensure threat indicators are rated by severity and responded to in a manner consistent with the threat.
 </li>
 <li>
 Identifies deficiencies and recommends corrective action to strengthen information security control and decrease the risk of data breach.
 </li>
 <li>
 Maintains and updates standard operation policies and procedures for incident response plans, e-discovery processing, remote acquisition/analysis tools, collections and forensic analysis techniques.
 </li>
 <li>
 Maintains industry standard tools and processes used for forensic analysis and eDiscovery collections and processes.
 </li>
 <li>
 Monitors security alerts for potential events/incidents as well as trending and historical analysis and ensuring all incident reports are complete and written within standard operations and ensures ticket audits and reviews are completed
 </li>
 <li>
 Utilizes leading forensic software to identify, collect, preserve and analyze electronic data from laptops, desktops, servers, email archives, infrastructure logs, network file servers, backup tapes, cell phones, PDAs and a wide variety of other media devices.
 </li>
 <li>
 Manages requests for electronic data and digital forensic investigations that relate to Litigation, Regulatory matters, Compliance, and Employee Investigations.
 </li>
 <li>
 Performs cybersecurity incident analysis and assist with incident response, including analysis of network content and metadata for investigations or malware detection and identifies the cause and extent of a breach.
 </li>
 <li>
 Serves as a subject matter expert and technical advisor in matters relating to the proper collection, preservation, packaging, and submission of digital and multimedia evidence.
 </li>
 <li>
 Participates in incident electronic evidence collection activities in major field investigations. Ensures evidence handling requirements are met.
 </li>
 <li>
 Performs post-incident report according to standard operations.
 </li>
 <li>
 Analyzes the tools and methodology used for investigation and accordingly presents improvements in control and corrective actions if any.
 </li>
 <li>
 Escalates and works with senior management on resolutions to overdue security items or any negative trends identified.
 </li>
 <li>
 Develops focused reporting and briefings for advanced cyber threats.
 </li>
 <li>
 Conducts studies and research for improving forensic analyses, scientific methods, and resolving forensic examination problems.
 </li>
 <li>
 Creates detailed, professional documentation and reports, including performance metrics and presentations for management.
 </li>
 <li>
 Leads or contributes to key projects related to corporate threat monitoring, forensics or information security initiatives.
 </li>
 <li>
 Facilitates group risk assessment activities and identifies any security-related process improvement opportunities.
 </li>
 <li>
 Monitors and performs trending on root cause analysis activities within assigned group and participates as needed to resolve clinical systems security related incidents.
 </li>
 <li>
 Assists on monitoring compliance with information security policies, standards and ENTERPRISE-WIDE strategy and facilitates threat and vulnerability evaluations on a regular basis. Measures and reports on the effectiveness of information security controls.
 </li>
 <li>
 Supports the security initiatives, corrective and preventative actions, and security measures by ensuring timely updates and escalating concerns and non-compliances.
 </li>
 <li>
 Understands and maintains the appropriate knowledge of Security Technologies, (Firewall, Anti-Virus, Email and Web Encryption, HIPS, NIPS, SIEM, WAF, DLP), security procedures, and services within Naufar IT Security as well as ensures all tools are functioning properly.
 </li>
 <li>
 Keeps up to date on changes to significant regulatory and applicable standards issued by internal or external agencies, as applicable to the Naufar&rsquo;s domain.
 </li>
 <li>
 Adheres to Naufar&rsquo;s standards as they appear in the Code of Conduct and Conflict of Interest policies
 </li>
 </ul>
 
 
 
 
 
 Academic Qualifications:
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree &ndash; IT - Mandate
 </li>
 <li>
 Master&rsquo;s degree &ndash; Cybersecurity - Desired
 </li>
 </ul>
 
 
 
 
 
 Experience Requirements:
 
 
 <ul>
 <li>
 5+ years of experience working as a security analyst or SME within a Security Operations Center with exposure to cyber security collection, analysis and threats management, investigation and digital forensics.
 </li>
 <li>
 Demonstrated experience in threat detection and analysis, incident response, and reporting.
 </li>
 <li>
 Demonstrated experience with incident response, deep dive forensics, insider threat, cyber and data exfiltration incidents.
 </li>
 <li>
 Demonstrated experience conducting assessments, digital forensic investigations, vulnerability management and incident response.
 </li>
 <li>
 Demonstrated experience with current cyber threats and the associated tactics, techniques, and procedures used to infiltrate computer networks.
 </li>
 <li>
 Demonstrated experience with SEIM products in the detection, response, mitigation, and/or reporting of cyber threats
 </li>
 <li>
 Demonstrated experience in the use of forensic tools (e.g. FTK, Encase, Forensic Toolkit, X-Ways, Linux based tools, etc.)
 </li>
 <li>
 Experienced with (or equivalent) the following regulations and frameworks: PCI, HIPAA, and ISO/IEC 2700x
 </li>
 </ul>
</div>

Cyber Security Analyst

Al Adyat consultancy

Job Summary: The SOC Analyst Level 1 is responsible for monitoring, detecting, and responding to security events and incidents within the organization. The role involves analyzing alerts from various security tools, escalating incidents when necessary, and maintaining documentation of security activities. This is an entry-level position for candidates looking to start a career in cybersecurity.Key Responsibilities:<ul><li>Monitor security alerts and events from SIEM (Security Information and Event Management) and other security tools.</li><li>Perform initial triage and analysis of security incidents.</li><li>Escalate confirmed incidents to Level 2 or appropriate teams.</li><li>Maintain accurate incident documentation and logs.</li><li>Assist in vulnerability management and routine security checks.</li><li>Follow standard operating procedures (SOPs) for incident response.</li><li>Stay updated on the latest cybersecurity threats and trends.</li></ul>Qualifications:<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Technology, Cybersecurity, or a related field.</li><li>Basic understanding of networking, firewalls, intrusion detection/prevention systems, and endpoint security.</li><li>Familiarity with SIEM tools such as Splunk, QRadar, or ArcSight is a plus.</li><li>Strong analytical and problem-solving skills.</li><li>Good communication skills, both written and verbal.</li><li>Willingness to work in shifts (if SOC operates 24/7).</li></ul>Preferred Certifications (Optional):<ul><li>CompTIA Security+</li><li>Cisco CCNA Security</li><li>EC-Council CEH (Certified Ethical Hacker)</li></ul>Working Conditions:<ul><li>Shift-based work depending on SOC operational hours.</li><li>Fast-paced environment requiring attention to detail and quick response to incidents.</li></ul>Career Path: Successful SOC Analyst L1 can progress to SOC Analyst L2, then to SOC Analyst L3, Threat Hunter, or Incident Response Specialist roles.Job Type: Full-timePay: QAR10,000.00 - QAR13,000.00 per monthEducation:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>SOC Analyst Level 1 (L1): 3 years (Required)</li></ul>Language:<ul><li>Arabic (Required)</li><li>English (Required)</li></ul>License/Certification:<ul><li>degree in Computer Science, Information Technology (Required)</li></ul>Location:<ul><li>Doha (Required)</li></ul>

SOC Analyst Level 1 (L1)

Auxo Talent

<div>
 
 We are looking for a SOC Analyst &ndash; L1 to support 24/7 security operations within a telecom environment. The role focuses on real-time threat monitoring, alert triage, and initial incident response, with hands-on use of Splunk for log analysis and investigation.
 
 
 
 
 
 
 Key Responsibilities:
 
 
 <ul>
 <li>
 Monitor security alerts and logs using Splunk and other SOC tools
 </li>
 <li>
 Perform initial triage and validation of security incidents
 </li>
 <li>
 Execute basic incident response actions and escalate to L2/L3 when required
 </li>
 <li>
 Track and document incidents in ticketing systems
 </li>
 <li>
 Support monitoring of telecom network and IT systems (core, RAN, OSS/BSS)
 </li>
 <li>
 Prepare shift reports and ensure proper handover
 </li>
 </ul>
 
 
 Requirements:
 
 
 <ul>
 <li>
 1&ndash;3 years of experience in SOC / security monitoring
 </li>
 <li>
 Hands-on experience with Splunk
 </li>
 <li>
 Basic knowledge of networking and cybersecurity concepts
 </li>
 <li>
 Familiarity with telecom environments is a plus
 </li>
 <li>
 Willingness to work in a 24/7 shift environment
 </li>
 </ul>
 
 
 
 
 This is a 12 month contract, with potential to extend
 
</div>

Security Operations Analyst – L1

Madre Integrated Engineering

We are seeking a Cybersecurity Incident Response Specialist to manage and respond to security incidents across the organization. The role focuses on detecting threats, analyzing security events, and executing effective response strategies to protect systems, data, and infrastructure.Key Responsibilities:<ul><li>Identify, analyze, and respond to security incidents and unauthorized access attempts in real-time.</li><li>Lead containment and eradication efforts to minimize the impact of cyber threats.</li><li>Conduct threat hunting and proactive security monitoring.</li><li>Prepare detailed technical reports and provide actionable security recommendations.</li><li>Investigate security incidents including malware infections, phishing attacks, unauthorized access, and data breaches.</li><li>Lead incident response lifecycle: detection, analysis, containment, eradication, and recovery.</li><li>Perform digital forensics and root cause analysis to prevent recurrence.</li><li>Develop and maintain incident response playbooks and procedures.</li><li>Collaborate with SOC, IT, and network teams for coordinated response.</li></ul>Requirements:<ul><li>Should have relevant experience in IT infrastructures or network security.</li><li>Candidates with OSCP, CRTO, GCTI, CISSP, or CISM certifications are preferred .</li><li>Knowledge of frameworks such as NIST, MITRE ATT&amp;CK, and ISO 27001.</li><li>Experience in network security, endpoint security, and incident investigation.</li><li>Familiarity with scripting (Python, PowerShell, or Bash) is an advantage.</li><li>Relevant certifications such as CEH, GCIH, CISSP, or similar are preferred.</li><li>Strong analytical, problem-solving, and communication skills.</li><li>Ability to work in a fast-paced environment and handle critical incidents.</li></ul>Location: QatarJob Type: Full-timeWork Location: On the road

Cybersecurity Incident Response Specialist

QatarEnergy

<div>
 
 Primary Purpose Of The Job
 
 
 
 Act as a SME subject matter expert in Cyber Security team to provide proactive support to detect, distinguish, isolate, interrupt, suppress, advanced threats that evade existing security solutions. Responsible for handling cyber security incident response activities for QatarEnergy&rsquo;s IT and OT / Industrial areas on a 24/7 basis. Provide real-time hands-on incident management support throughout all stages of the cyber security incident lifecycle. Use state-of-the-art tools to analyse and investigate incidents and take immediate action or recommend a course of action to safeguard QatarEnergy.
 
 
 
 Required Experience And Skills
 
 
 
 10+ years&rsquo; experience working in a large-scale IT environment with focus on Information Security, and knowledge of Operational Technology.
 
 
 <ul>
 <li>
 6+ years previous Security Operations Centre Experience in conducting security investigations.
 </li>
 <li>
 Strong understanding of security incident management, malware management processes.
 </li>
 <li>
 Proven track record and demonstrated relevant experience as a key member of an incident response, malware analysis, or similar role.
 </li>
 <li>
 Advanced knowledge on Anti-Malware, Vulnerability Management, Intrusion Detection/Protection, Perimeter Security, Security Incident Management, Security Information and Event Management (SIEM), Penetration Testing (application, network, host, social).
 </li>
 <li>
 Strong understanding and experience combatting crime-ware or APT is a distinguishing factor.
 </li>
 <li>
 Strong understanding of networking principles including TCP/IP, WANs, LANs, and commonly used Internet protocols such as SMTP, HTTP, FTP, POP, LDAP. Demonstrated knowledge of security related technologies and their functions (IDS, IPS, FW, WAF, SIEM and the like).
 
 
 </li>
 </ul>
 
 Educational Qualifications
 
 
 
 Bachelor&rsquo;s degree in information security, computer science, or systems engineering.
</div>

SR. CYBER SECURITY INCIDENT RESPONDER

Forvis Mazars in Qatar

<div>Responsibilities

Responsible to triage cyber security incidents as a member of Security Operations Center incident responders&rsquo; team first line.
<ul><li>Continuously monitors the operating systems alert queue; triages security alerts; monitors health of operating systems security sensors and endpoints; collects data and context necessary to escalate to Tier 2 Analyst.
</li></ul><ul><li>Continuously monitoring the operating systems alert queue using multiple tools, such as SIEM, EDR and custom-built system monitoring tools.</li></ul>

<ul><li>Continuously monitors health of operating systems security sensors.</li></ul>

<ul><li>Conduction initial triage of alerts to identify potential, false positives, policy violations, intrusion attempts and compromises on the system level.</li></ul>

<ul><li>Consolidating data from alert triage to provide context necessary to escalate to Tier 2 Analyst.</li></ul>

<ul><li>Escalate to Tier 2 Analyst with all necessary data for deeper analysis and review.</li></ul>

Should have good knowledge of security tools as follows:

<ul><li>Knowledge about MS Windows and UNIX based systems</li></ul>

<ul><li>Knowledge TCP/IP version 4 and version 6</li></ul>

<ul><li>Security Event and Incident Monitoring System (SIEM), Orchestration tool and playbook response concept, Endpoint Detection and Response tool (EDR), Anti-malware systems, Intrusion Detection and Prevention Systems, Firewalls.</li></ul>

Required industry certificates:

<ul><li>Comp TIA CySA+ certificate &ndash; Cyber Security Analyst Certification - in good standing</li></ul>

<ul><li>Incident Response Fundamentals certificate &ndash; in good standing</li></ul> 


Recommended industry certificates:
<ul><li>Analyst/Administrator for any SIEM solution industry leaders</li></ul>

<ul><li>Some of SANS, GIAC, ISACA, (ISC)2 certificates or trainings</li></ul></div>

CSOC Analyst L1

<div>Job responsibilities: 

Responsible to triage operating system related cyber security incidents as a member of Security Operations Center incident responders&rsquo; team second line.
Performs deep-dive incident analysis by correlating data from various sources; determines if a critical system or data set has been impacted; advises on remediation; provides support for new analytic methods for detecting threats.

<ul><li>Proactively monitoring the operating systems alert queue using multiple tools, such as SIEM, EDR and custom-built system monitoring tools.</li></ul>

<ul><li>Conducting triage of alerts to identify potential, false positives, policy violations, intrusion attempts and compromises on the system level.</li></ul>

<ul><li>Consolidating data from alert triage to provide context necessary to escalate Tier 3 Analyst.
</li></ul><ul><li>Escalate to Tier 3 Analyst with all necessary data for deeper analysis and review.</li></ul>

<ul><li>Collecting evidence on operating system level for Incident analysis.</li></ul>

<ul><li>Advises on remediation.</li></ul>

<ul><li>Supporting operating system related security controls management.</li></ul>

<ul><li>Supporting operating system related threat detection analytics.</li></ul>

Should have good knowledge of security tools and skills as follows:

<ul><li>Knowledge about MS Windows and UNIX based systems</li></ul>

<ul><li>Knowledge TCP/IP version 4 and version 6</li></ul>

<ul><li>Manual testing skills</li></ul>

<ul><li>Automation testing skills</li></ul>

<ul><li>Technical writing skills</li></ul>

<ul><li>Problem solving skills and attention for detail</li></ul>

<ul><li>Malware analysis sandboxing solution, Security Event and Incident Monitoring System (SIEM), Orchestration tool and playbook response concept, Endpoint Detection and Response tool (EDR), Anti-malware systems, Intrusion Detection and Prevention Systems, Firewalls.</li></ul>

Required industry certificates:

<ul><li>ECC CEH &ndash; Certified Ethical Hacker - in good standing</li></ul>

<ul><li>some of SANS, GIAC, ISACA, (ISC)2 certificates or trainings - in good standing</li></ul>

Recommended industry certificates:

<ul><li>SANS, GIAC, ISACA, (ISC)2</li></ul></div>

CSOC Analyst L2

Explore 108+ Incident response analyst in Doha this April. Find roles across top companies and apply now to boost your career.