information security specialist Jobs in Doha

information security specialist

security officer

business analyst

reporting analyst

appsec (application security expert) Jobs in Doha

appsec (application security expert)

security analyst

QatarEnergy

<div>Primary Purpose of the Job:
<p>
Develop and implement an operational risk management program. Focus on enhancing operational risk measurement &amp; analysis, and operational risk reporting. Guide the process of applying internal controls (mitigation). Establish security policies, procedures and standards and ensure that reviews of operational documentation is carried out at planned intervals to meet the security operational requirements. Conduct investigations of security related incidents, occurrences or events occurring within Doha commercial buildings/ facilities. Thereby to determine the work element and root causes of an incident, and to assist in providing a solution to prevent recurrence.</p>
Required Experience and Skills:
<ul><li>At least 12 years&rsquo; experience in industrial or corporate security, with at least 5 years at a supervisory level.</li><li>Proven, in-depth understanding of security risk management processes, mitigation methods and security management system programs.</li><li>Investigative experience in an industrial or corporate security environment.</li><li>Demonstrated leadership, problem solving and strong interpersonal skills.</li><li>Fluency in English.</li><li>Proven ability to organize, motivate and supervise subordinates.</li></ul>
Educational Qualifications:
<ul><li>A recognized University Degree with a Risk/Security focus.</li></ul></div>

SECURITY ANALYST

ECCO Gulf Majorel Qatar

<div><b>Information Security Analyst</b>
<p><b>
Job Purpose</b></p>
<ul>
<li>Responsible to support Information Security Governance, Risk and Control</li>
<li>activities. Assist in all information security activities in order to protect the</li>
<li>organization&rsquo;s information technology assets from cyber-attacks.</li>
<li>Function Information Technology</li>
</ul>
<p><b>Key Responsibilities</b></p><br>
<p></p>
<ul>
<li> Supporting and maintaining the required Information Security policies, procedures, guidelines, registers and relevant documentations for the GRC activities.</li>
<li> Obtain, review, and prepare periodic review reports such as User</li>
<li>Access Management reports for Audit, GRC and other government</li>
<li>regulatory compliance activities.</li>
<li> Coordinate, conduct and participate in all related Audits includingISMS, MPTO, Internal and External.</li>
<li> Maintain overall ISMS related documentation with appropriate versioning and tracking changes</li>
<li> Coordinate Information Security and Privacy Management related</li>
<li>Meetings</li>
<li> Train and support the internal teams and staffs on activities related to information security compliance and personal information and privacy management</li>
<li> Ensure all approved policies related to Information Security are applied and maintained in an effective and efficient manner</li>
<li> Coordinate with relevant Teams and external MSPs on incidence response activities</li>
<li> Support staffs on minor troubleshooting activities related to information security Create / Translate relevant documentations and contents in Arabic for</li>
<li>wider circulation Coordinate, communicate effectively and maintain cordial relationship with internal and external departments of Qatar Post with respect to information security activities</li></ul><br>
<p></p>
<p><b>
Knowledge / Skills Required</b></p>
<ul>
<li> University Degree related to Information Technology or similar</li>
</ul>
<p><b>Qualification</b></p>
<ul>
<li> Good knowledge in Arabic both written and spoken</li>
<li> Preferably certifications in Information Security such as CISA, CISM,</li>
<li>MCSE</li>
<li>Preferably certifications in ISO27001:2013 Lead Implementer</li>
<li> 3+ years of experience in information security or information</li>
<li>technology processing facilities</li></ul></div>

Information Security Analyst

<div>
 <strong>
  Primary Purpose Of The Job
  <br/>
  <br/>
 </strong>
 Governance and execution of the Information Security Management System (ISMS) including developing
 <br/>
 <br/>
 policies,standards and procedures required for the corporate information security in both an Information
 <br/>
 <br/>
 technology (IT) and Operational Technology (OT) capacity.
 <br/>
 <br/>
 Define required information security policies, standards and procedures related to their areas of operation as well as
 <br/>
 <br/>
 raising awareness of those polices, standards and procedures.
 <br/>
 <br/>
 Ensure adequate an effective IT controls exist to meet applicable current and future security compliance requirements.
 <br/>
 <br/>
 Conduct compliance and operational maturity assessments to ensure optimal operation of the information and
 <br/>
 <br/>
 operational technology environments under the guidelines of the ISMS.
 <br/>
 <br/>
 Develop reporting Metrics, dashboards and evidences of compliance activities.
 <br/>
 <br/>
 Coordinate with IT stakeholders, project managers, and business owners to facilitate vendor risk assessments, due
 <br/>
 <br/>
 diligence review and security requirements definition. Maintain third-party assessment documentation.
 <br/>
 <br/>
 Stay updated on the latest security trends, emerging threats and best practices to continuously improve the overall
 <br/>
 <br/>
 security posture.
 <br/>
 <br/>
 Coordinate and align activities between Information Security and Business Continuity, and liaise within IT Department
 <br/>
 <br/>
 to ensure business continuity and disaster recovery plans are in place, tested, and report regularly.
 <br/>
 <br/>
 Carry out other Security related activities as assigned by team Lead.
 <br/>
 <br/>
 <strong>
  Required Experience And Skills
  <br/>
  <br/>
 </strong>
 10+ years of relevant professional experience.
 <br/>
 <br/>
 <ul>
  <li>
   Experience with large ICS &amp; ICT environments in the Energy sector, preferably in Oil &amp; Gas.
  </li>
  <li>
   Experience with and understanding of customized information security management systems.
  </li>
  <li>
   Experience in defining Governance, Risk, and Compliance (GRC) processes and leveraging industry-standard GRC
   <br/>
   <br/>
  </li>
 </ul>
 tools and products.
 <br/>
 <br/>
 <ul>
  <li>
   Knowledge of information security capabilities and requirements analysis.
  </li>
  <li>
   Knowledge of relevant state laws, industry regulations, and security standards.
  </li>
  <li>
   Excellent written, verbal and presentation communication skills.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Educational Qualifications
  <br/>
  <br/>
 </strong>
 Bachelor degree in information security, computer science, or engineering.
 <br/>
 <br/>
 <ul>
  <li>
   Professional certifications in information security management and standards compliance (e.g., CISSP, CISM,
   <br/>
   <br/>
  </li>
 </ul>
 CRISC, GIAC, ISO27001, etc.) and experience with control frameworks (e.g., NIST Cybersecurity Control Framework).
</div>


SR. INFORMATION SECURITY ANALYST

i4 Solutions

<div>
 Date: Oct 2, 2025
 <br/>
 <br/>
 Location:
 <br/>
 <br/>
 Doha, QA
 <br/>
 <br/>
 Company: i4 Solutions W.L.L
 <br/>
 <br/>
 Req ID: 2273
 <br/>
 <br/>
 <strong>
  Job Title
  <br/>
  <br/>
 </strong>
 SOC Analyst
 <br/>
 <br/>
 <strong>
  Job Scope
  <br/>
  <br/>
 </strong>
 The SOC analyst will monitor and fight threats on behalf of our client's IT infrastructure, and to assess security systems and measures for weaknesses and possible improvements. The SOC analyst is responsible for ensuring the protection of digital assets from unauthorized access, both online (cloud) and on premise for our client's networks against cybersecurity threats such as hackers, Cyber-terrorists and malware that can steal or corrupt sensitive customer data.
 <br/>
 <br/>
 <strong>
  Main Duties And Responsibilities
  <br/>
  <br/>
 </strong>
 Technical and Operations
 <br/>
 <br/>
 <ul>
  <li>
   Identify, secure, and weed out the threats as front-line defense personnel
  </li>
  <li>
   Monitor, manage, and configure security tools, review incidents to assess their urgency, and escalate incidents if necessary
  </li>
  <li>
   Operate as an incident responder (Tier 2), remediating serious attacks, assessing the scope of the attack and affected systems, and collecting data for further analysis
  </li>
  <li>
   Analyze a breach within our client's environment to reach the root cause and remediation steps to limit risk
  </li>
  <li>
   Generate security reports for our clients, that serve as an input to evaluate the efficacy of the security policies
  </li>
  <li>
   Advise on what our clients should implement as part of the necessary changes required to counter the attack or improvise security standards
  </li>
  <li>
   Act as first line of defense as part of our managed security services for our clients to document incidents and contribute to incident response and disaster recovery plans if required
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 Talent Development
 <br/>
 <br/>
 <ul>
  <li>
   Lead and coach the team cultivating empowerment and ownership
  </li>
  <li>
   Develop capabilities and secure a solid succession plan
  </li>
  <li>
   Conduct regular performance reviews, identify training needs and oversee development plans
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Position Requirements
  <br/>
  <br/>
 </strong>
 <strong>
  Education
  <br/>
  <br/>
 </strong>
 Bachelor&rsquo;s degree in Information Technology, Computer Science or any other related field
 <br/>
 <br/>
 <strong>
  Experience
  <br/>
  <br/>
 </strong>
 At least 3 years in a Security Operations Center (SOC) related to MSS environment
 <br/>
 <br/>
</div>


SOC Analyst

Fusion Group Holding

<p><b>Job Title: Senior Systems Analyst</b></p><p><b>Duration: Permanent </b><br/><b>Location: Doha</b></p><p><b>Job Description</b>:</p><p><b>JOB PURPOSE / OBJECTIVE </b></p><p>Design, implement, and maintain robust information system solutions that enhance organizational efficiency, security, and operational effectiveness of systems under the scope of related Sections. The Senior Systems Analyst is responsible for evaluating and deploying IS solutions, ensuring alignment with IS policies, and supporting the integrity, confidentiality, and availability of enterprise data. This includes developing and integrating new functionalities into existing systems, overseeing system configuration, installation, and performance optimization and alignment with business goals through expert-level systems analysis and technical leadership. Work with various SMEs within the IS Department or from vendors for implementation of solutions. Assists in the development of procedures to bring company into alignment with the Company and Qatar&rsquo;s compliance and regulatory requirements.</p><p><b>KEY ACCOUNTABILITIES </b></p><p><b>General Duties </b></p><ul><li>Proven work experience as a senior system analyst.</li><li>Experience on various Microsoft Windows Operating Systems, VMWare, or any Hypervisor infrastructure.</li><li>Hands-on experience in analyzing vulnerabilities and their impact on applicable systems.</li><li>Hands-on experience in security patch deployment on Microsoft Windows and non-Windows platforms</li><li>Hands-on experience in using tools like Microsoft SCCM and Manage Engine Desktop Central forpatch management and deployment.</li><li>Detailed technical knowledge of related applications and Windows operating system.</li><li>Understanding of the latest IS solutions, techniques, and protocols.</li><li>Familiarity with web related technologies (Web applications, Web Services, Service Oriented Architectures) and of web related protocols.</li><li>Problem solving skills and ability to work under pressure.</li><li>Assist in and support internal and external audits activities.</li><li>Support the delivery of IS Services including deployment, collection, assessment, and reporting of metrics.</li><li>Work independently under the general direction of the Head, IT Operations to ensure timely and accurate deployment, operations, and maintenance of IS systems.</li><li>Specify, evaluate, deploy, configure, support, maintain, and analyze the following related systems:</li><li>Virtualization Platforms</li><li>Privileged Access Management (PAM)</li><li>Patch Management</li><li>Email Systems</li><li>Web Filter Systems</li><li>On-premises Backups System</li><li>Cloud Backup System</li><li>Office 365</li><li>Collaboration Platform (MS Teams or similar)</li><li>Personal Storage Systems (H: Drive, One Drive or similar)</li><li>Multi Factor Authentication System</li><li>Single Sign-On system</li><li>Active Directory</li><li>DNS System</li><li>DHCP System</li><li>Data/File Servers</li><li>Data Sanitization</li><li>Storage Area Network (SAN)</li><li>Server Hardware</li><li>Microsoft Clusters</li><li>Work independently under the general direction of the Head, IT Operations to ensure timely and accurate deployment, operations, and maintenance of IS solutions.</li><li>Recommend procedure changes and enhancements as needed to maintain operational efficiency and effectiveness.</li><li>Assist and support in any external audits and certification requirements.</li><li>Perform duties that may be assigned from time-to-time by the Head, IT Operations or IS Manager.</li></ul><p><b>KEY ACCOUNTABILITIES </b></p><p><b>Quality, Health, Security, Safety and Environment </b></p><ul><li>Ensure compliance with Life Critical Procedures, Tenets of Operations, Consent to Operate, plant policies and procedures, Daily Operating Instructions, Standard Operating Procedures (SOPs), Job Safety Analyses (JSAs), MOC Process, and Quality Management System.</li><li>Participate in the safety activities to ensure regulatory, health, safety, security, environmental, and quality compliance.</li><li>Execute Stop Work Authority and take immediate corrective actions to stop unsafe behaviours.</li></ul><p><b>Policies, Systems, Processes and Procedures </b></p><ul><li>Maintain a working knowledge of applicable cyber security standards.</li><li>Provide input to the planning, design, development and implementation of technical controls and procedures associated with compliance to regulatory requirements, cyber security guidance, and standards.</li><li>Contribute to the identification of opportunities for the continuous improvement of systems, processes and practices in order to increase confidentiality, integrity, and availability.</li><li>Implement all relevant Section&rsquo;s processes, procedures and instructions so that work is carried out in a controlled and consistent manner.</li></ul><p><b>Reporting </b></p><ul><li>Communicate ideas, present, and explain technical knowledge to stakeholders.</li><li>Prepare timely and accurate recaps and reports in order to meet departmental requirements, policies and standards.</li><li>Communicate to Supervisor to inform on issues that require additional follow up.</li><li>Report incidents and near misses and participate in investigations as required.</li></ul><p><b>QUALIFICATIONS &amp; EXPERIENCE </b></p><p><b>Education </b>Required : Bachelor&rsquo;s degree in computer science/ computer engineering/ information technology Preferred : Master&rsquo;s Degree in Information/Cyber Security</p><p><b>Experience </b>Required : Total of 5-7 years of experience in a similar position/ field.</p><p>Preferred : Experience in the Oil &amp; Gas/Petrochemicals Industry.</p><p><b>Other Job Specific Requirements and/or Vocational Accreditations </b></p><ul><li>SSL Encryption and SSO</li><li>LDAP directory experience</li><li>Excellent writing and communication</li><li>Ability to work well independently or with a team</li><li>Capable of meeting deadlines</li><li>Microsoft Windows Operating System</li><li>Microsoft M365 Solution</li><li>Cloud Computing</li><li>Server Hardware</li><li>Proficient in Backup and Storage Systems</li><li>Proficient in Hypervisor/Virtualization Systems</li><li>Security Patch Management and Patch deployment</li><li>Expert working knowledge in Microsoft SCCM</li><li>Expert working knowledge in Email Systems</li><li>Expert working knowledge in Active Directory systems</li><li>Expert working knowledge in Mobile Device Management</li></ul><p><b>Certifications/Accreditations Two or more of the following certifications (or equivalent certification) is required: </b></p><ul><li>Microsoft Certified Systems Engineer (MCSE)</li><li>Certified Information Systems Security Professional (CISSP)</li><li>Certified Information Systems Auditor (CISA)</li><li>Certified Ethical Hacker</li><li>Global Information Assurance Certification</li><li>Certified Ethical Hacker (CEH)</li></ul><p><b>Languages </b>Required : English &ndash; Proficient</p><p>Preferred: Arabic - Working knowledge</p><p>Job Type: Full-time</p><p>Education:</p><ul><li>Bachelor's (Preferred)</li></ul><p>Experience:</p><ul><li>System Analyst: 8 years (Required)</li><li>System Security: 4 years (Required)</li><li>Microsoft SCCM: 6 years (Required)</li><li>Active Directory systems: 7 years (Required)</li><li>Mobile Device Management: 6 years (Required)</li><li>SSL Encryption and SSO: 6 years (Required)</li><li>Cloud Backup System: 5 years (Required)</li><li>VMWare: 7 years (Required)</li><li>Infrastructure: 7 years (Required)</li></ul><p>License/Certification:</p><ul><li>MCSE (Required)</li><li>CISSP (Preferred)</li><li>CEH (Preferred)</li><li>CISM (Preferred)</li><li>CISA (Preferred)</li></ul>

Senior Systems Analyst

COZMALABS

<p><b>Responsibilities:</b></p><ul><li>Implement real-time oversight of security systems, including firewalls, IDS/IPS, EDR, XDR, WAF, SIEM, and email gateways, to promptly detect and mitigate threats in both on-premises and cloud environments.</li><li>Conduct regular vulnerability scans and risk assessments to identify security gaps, ensuring timely remediation in both on-premises and cloud environments and enhancement of the security framework.</li><li>Establish and execute a comprehensive incident response plan for security breaches, encompassing investigation, containment, recovery, and post-incident analysis using SIEM and EDR/XDR tools.</li><li>Formulate and enforce security policies aligned with industry standards (e.g., ISO 27001, NIST, QCERT and NIA) to ensure compliance and enhance overall security.</li><li>Implement ongoing security training and awareness programs to educate employees on best practices and emerging threats, fostering a security-conscious culture.</li><li>Establish robust access controls to limit data exposure based on user roles, ensuring only authorized personnel can access sensitive information.</li><li>Integrate threat intelligence feeds to stay updated on emerging threats and vulnerabilities, enhancing proactive defense measures.</li><li>Conduct periodic security audits and penetration testing to evaluate the effectiveness of security measures and identify areas for improvement.</li><li>Prepare and submit regular compliance reports to management, highlighting adherence to security policies, incident responses, and ongoing security initiatives.</li></ul><p><b>Qualifications:</b></p><ul><li>3-5+ years of experience in the following:</li><li>Network and System Security devices and tools.</li><li>Infrastructure Services Governance.</li><li>Vulnerability scanning and assessments.</li><li>Security incident response management.</li><li>Enforcing industry security policy standards and frameworks.</li><li>Configuring and integrating threat intelligence feeds.</li><li>Writing security reports, policies, and procedures.</li><li>Conducting penetration testing and audits.</li></ul><p>Job Type: Full-time</p>

Information Security Specialist

<div></div><div><p><b>Job Posting Date: </b>15 Oct 2025
</p><p><b>Work Location:</b> Doha, QA
</p><p><b>Company: </b>QatarEnergy LNG
</p><div><div><div><div><h2 class="jobSectionHeader"><b>Job Specification</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Job Purpose</b></h2>
</div><div><p>
Safeguarding the organization&rsquo;s IT and OT environments by detecting, investigating, and proactively hunting for cyber threats. The role bridges intelligence and operations, turning threat data into actionable detections and hunt activities. Working closely with SOC Team, the specialist enhances detection capabilities and strengthens the organization&rsquo;s overall cyber resilience.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Job Context &amp; Major Challenge(s)
</b></h2></div><div><p>Major challenges are,</p>
<p>
(1)Keeping pace with evolving threat landscape as attackers develop new techniques and strategies.</p>
<p>
(2)Thorough understanding of security operations centre (SOC) 24x7</p>
<p>
(3) supporting the Information Risk Management Division Manager in dealing with an increased cybersecurity risk due to the geopolitical situation</p>
<p>
(4) Contributing to the ongoing continuous improvement of SOC due to the current maturity level and the changing threat level</p>
<p>
(5) Keeping up to date with IT and OT cyber threats to stay ahead of such threats.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Key Job Accountabilities - I</b></h2>
</div><div><ul><li>Perform proactive threat hunting across IT and OT networks using intelligence from the Threat Analyst to uncover stealthy or undetected threats.</li>
<li>Analyse and correlate security incidents to understand attacker behaviour, techniques, and campaign patterns beyond simple alerts.</li>
<li>Bridge threat intelligence with detection logic, translating new IOCs, TTPs, and adversary trends into actionable detection content for the SOC Engineer to implement.</li>
<li>Conduct deep-dive investigations on high-severity alerts, ensuring accurate root cause determination and actionable recommendations.</li>
<li>Support incident response teams during containment and eradication phases by providing context on attacker tools, tactics, and infrastructure.</li>
<li>Collaborate with the SOC Engineer to refine SIEM use cases, detection rules, and SOAR playbooks based on threat hunting outcomes.</li>
<li>Perform malware reverse engineering and behavioural analysis, extracting IOCs, YARA rules and technical findings to feed into threat hunting and detection development.</li>
<li>Develop and maintain threat profiles for key adversaries and attack scenarios targeting both IT and OT environments.</li>
<li>Prepare technical briefings reports summarizing threat findings and lessons learned for management.</li>
<li>Continuously improve analytical techniques, staying current with emerging threats, tools, and frameworks like MITRE ATT&amp;CK.</li>
<li>Ensure alignment with legal and ethical guidelines to ensure team activities are authorized and do not compromise company&rsquo;s integrity or reputation.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Person Specification - Minimum Requirement</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Qualifications</b></h2>
</div><div><ul><li>Bachelor degree level in information security, computer science or engineering.</li>
<li>Holds a relevant professional certification such as (e.g., GCTI, GCIA, GCIH, GREM).</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Knowledge and/or Experience
</b></h2></div><div><ul><li>10 years Information Security experience in a similar position.</li>
<li>Proven experience in cyber threat analysis, hunting, and incident investigation across both IT and OT environments.</li>
<li>Strong understanding of network protocols, malware behaviour, and adversary TTPs aligned with the MITRE ATT&amp;CK framework.</li>
<li>Experience with SIEM/SOAR platforms, threat intelligence tools, and log analysis for advanced threat detection.</li>
<li>Strong analytical and investigative skills with hands-on experience in threat hunting.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Technical and Business Skills</b></h2>
</div><div><ul><li>Ability to assess and evaluate risk and the impact of legislation and actively promotes compliance.</li>
<li>Possesses a good understanding of IT and OT business applications.</li></ul></div></div></div></div></div><p></p>

Cyber Threat Specialist

Explore 506+ Security analyst in Doha this November. Find roles across top companies and apply now to boost your career.