security operations analyst

PROZ TECHNOLOGIES

Job Title: SOC L2 Analyst (OT Security) Location: Doha, Qatar (On-site)About the RoleWe are looking for an experienced SOC L2 Analyst to join a leading Security Operations Center (SOC) team in Qatar. The role focuses on advanced threat monitoring, incident investigation, and response across both IT and Operational Technology (OT) environments.This is an excellent opportunity for cybersecurity professionals with strong SIEM and incident handling experience, especially those with exposure to industrial/OT security systems.Key Responsibilities<ul><li>Investigate and analyze security alerts and incidents, including escalations from L1 analysts</li><li>Perform in-depth threat analysis across IT and OT environments</li><li>Act as an incident responder for security events and recommend remediation actions</li><li>Monitor and manage SIEM alerts, logs, and SOC tickets within SLA timelines</li><li>Escalate critical incidents to L3/Senior Analysts when required</li><li>Support and mentor junior SOC analysts (L1)</li><li>Collaborate with internal teams to improve threat detection and response capabilities</li><li>Contribute to SOC documentation, runbooks, and knowledge base</li></ul>Required Skills &amp; Experience<ul><li>Minimum 5+ years of experience in SOC / Cybersecurity operations</li><li>Strong experience with SIEM tools (Splunk, QRadar, ArcSight, Azure Sentinel, etc.)</li><li>Hands-on experience in incident detection, investigation, and response</li><li>Strong knowledge of network security, logs, and attack patterns</li><li>Experience with security tools such as EDR, IDS/IPS, Firewalls, Vulnerability Scanners</li><li>Familiarity with MITRE ATT&amp;CK framework</li><li>Good understanding of Windows, Linux, and network environments</li></ul>Preferred (Nice to Have)<ul><li>Experience with OT / ICS / SCADA security environments</li><li>Knowledge of protocols like Modbus, DNP3, BACnet</li><li>Exposure to industrial cybersecurity frameworks</li><li>Basic scripting knowledge (Python, PowerShell, Bash)</li></ul>Certifications (Preferred)<ul><li>SC-200, GCIH, CEH, or equivalent cybersecurity certifications</li><li>SIEM certifications (Splunk, Azure Sentinel, etc.)</li><li>OT Security certifications (e.g., Nozomi) are a plus</li></ul>Ideal Candidate<ul><li>SOC L2 Analyst / Senior Security Analyst</li><li>Experience working in MSSP or enterprise SOC environments</li><li>Strong analytical and problem-solving skills</li><li>Ability to work in a 24x7 SOC environment</li></ul>Job Type: PermanentPay: Up to QAR15,000.00 per monthWork Location: In person

SOC L2 Analyst (OT Security)

Tikal Group Doha

Job Opportunity: Cybersecurity AnalystLocation: Doha, Qatar Company: Tikal Group DohaAbout UsTikal Group Doha is a technology solutions provider specializing in secure systems integration, IT infrastructure, and digital transformation. We are committed to protecting businesses against evolving cyber threats and ensuring the highest standards of data security. As we expand, we are seeking a skilled Cybersecurity Analyst to strengthen our security operations and safeguard our digital assets.Role OverviewThe Cybersecurity Analyst will be responsible for monitoring, analyzing, and responding to security incidents, ensuring compliance with regulatory standards, and proactively identifying vulnerabilities. This role requires technical expertise, analytical skills, and the ability to collaborate across teams to maintain a secure IT environment.Key Responsibilities<ul><li>Monitor and analyze security alerts, logs, and incidents.</li><li>Conduct vulnerability assessments and penetration testing.</li><li>Investigate and respond to cybersecurity threats and breaches.</li><li>Implement and maintain security tools, firewalls, and intrusion detection systems.</li><li>Ensure compliance with Qatari regulations and international cybersecurity standards.</li><li>Collaborate with IT teams to strengthen system defenses and patch vulnerabilities.</li><li>Prepare reports and recommendations for management on security posture.</li><li>Stay updated on emerging threats, trends, and best practices in cybersecurity.</li></ul>Qualifications<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or related field.</li><li>2&ndash;5 years of experience in cybersecurity analysis or IT security.</li><li>Strong knowledge of security frameworks (ISO 27001, NIST, CIS).</li><li>Proficiency in SIEM tools, firewalls, and endpoint protection systems.</li><li>Experience with incident response, vulnerability management, and risk assessment.</li><li>Excellent problem-solving, analytical, and communication skills.</li><li>Ability to thrive in a fast-paced, multicultural environment.</li></ul>Why Join Us?<ul><li>Be part of a growing cybersecurity team in Doha.</li><li>Play a key role in protecting Tikal Group Doha&rsquo;s digital infrastructure.</li><li>Competitive salary and benefits package.</li><li>Opportunities for professional development and career advancement.</li><li>Supportive, innovation-driven, and security-focused work culture.</li></ul>Pay: Up to QAR35,000.00 per monthWork Location: In person

Cybersecurity Analyst

malomatia

<div>
 
 Job Description
 
 
 
 <ul>
 <li>
 Operate within SOC environment, to Analyze alerts and log data promptly and effectively. Assess the severity and impact of potential threats to accurately prioritize alerts and incidents.
 </li>
 <li>
 Monitor and analyze security information and event management (SIEM) tools like Microsoft Sentinel to identify potential security incidents and anomalies.
 </li>
 <li>
 Conduct in-depth analysis of security events, collaborating directly with customers to escalate and thoroughly investigate incidents. This involves understanding the scope, impact, and root cause of incidents to tailor the response effectively.
 </li>
 <li>
 Execute swift containment and remediation measures for identified security incidents, employing predefined response strategies to isolate affected systems and prevent further compromise.
 </li>
 <li>
 Proactively participate in the creation and enhancement of processes and procedures such as Security Playbooks.
 </li>
 <li>
 Refine and optimize analytical rules within the Sentinel SIEM platform to reduce false positive alerts, enhancing the accuracy and efficiency of threat detection.
 </li>
 <li>
 Assist in vulnerability assessments and penetration testing activities. Evaluate and prioritise identified vulnerabilities for remediation by collaborating directly with customers.
 </li>
 <li>
 Maintain accurate records of incidents, investigations, and security-related activities within the incident management platform.
 </li>
 <li>
 Create detailed reports on security incidents, response actions taken, and recommendations for improvement.
 </li>
 <li>
 Research new concepts and present them to the internal team as well as customers.
 </li>
 <li>
 Security monitoring experience with one or more SIEM technologies, preferably Microsoft Sentinel. Knowledge of EDR solutions including Microsoft Defender.
 </li>
 <li>
 Strong understanding of Windows, Linux and cloud technologies including Microsoft Azure and Office365.
 </li>
 <li>
 Good understanding of security solutions including SIEMs, Web Proxies, Anti-Virus, Firewalls, VPN, authentication providers and mechanisms, encryption, IPS/IDS.
 </li>
 <li>
 Strong understanding of networking principles including TCP/IP, WANs, LANs, and commonly used Internet protocols.
 </li>
 <li>
 The candidate must hold a degree in Computer Science, Information Security, or a related field, along with Microsoft Security Operations Analyst certification.
 </li>
 </ul>
</div>

Associate SOC L1 Analyst

Solusiaman Sekurindo

Solusiaman Sekurindo is a trusted security solutions provider dedicated to safeguarding people, assets, and operations through advanced systems and professional services. We deliver reliable, responsive, and technology-driven security support across diverse industries.Position Overview We are seeking a vigilant and highly organized Security Operations Coordinator to join our Doha team. This role is critical in ensuring the smooth execution of daily security operations, coordinating field teams, and maintaining high standards of safety and compliance.Key Responsibilities<ul><li>Coordinate day-to-day security operations and support field personnel deployment</li><li>Monitor security systems, incident reports, and operational activities</li><li>Act as a central point of contact for security teams, clients, and stakeholders</li><li>Manage incident logging, escalation, and resolution processes</li><li>Prepare operational reports, schedules, and performance summaries</li><li>Ensure compliance with company policies, client requirements, and regulatory standards</li><li>Assist in risk assessments and implementation of security procedures</li><li>Coordinate training schedules and support staff readiness initiatives</li></ul>Qualifications<ul><li>Bachelor&rsquo;s degree in Security Management, Business Administration, or a related field</li><li>Proven experience in security operations, coordination, or a similar role</li><li>Strong understanding of security protocols and incident management processes</li><li>Excellent organizational and multitasking abilities</li><li>Strong communication and interpersonal skills</li><li>Ability to remain calm and decisive under pressure</li><li>Proficiency in Microsoft Office and reporting tools</li></ul>Preferred Skills<ul><li>Experience with CCTV monitoring systems and access control platforms</li><li>Familiarity with risk assessment and emergency response planning</li><li>Background in coordinating security personnel or facilities management</li><li>Multilingual communication skills are an advantage</li></ul>What We Offer<ul><li>Competitive salary package</li><li>Professional and structured work environment</li><li>Opportunities for growth within the security operations field</li><li>Exposure to modern security technologies and systems</li></ul>How to Apply Interested candidates are invited to submit their CV along with a brief cover letter outlining their relevant experience and suitability for the role.Job Type: Full-timePay: QAR640,000.00 per yearWork Location: In person

Security Operations Coordinator

QATAR VISION PROJECTS

QATAR VISION PROJECTS The company provides design coordination, project planning, contract administration, and onsite construction management&mdash;focusing on timely delivery, cost control, and compliance with local regulations and Qatari standards.OverviewSeasoned security professional responsible for continuous monitoring, threat detection, incident response, and security assurance across corporate networks, endpoints, cloud platforms, and applications. Works with IT, DevOps, and business stakeholders to reduce risk, improve detection fidelity, and ensure regulatory and audit readiness.Key responsibilitiesSecurity monitoring &amp; alert management-Triage and validate alerts from SIEM, EDR, IDS/NGFW, CASB and cloud-native security sources; prioritize incidents by business impact and escalate per defined SLAs.Incident response &amp; investigations-Lead containment, eradication and recovery activities; perform root-cause analysis, preserve forensic evidence, coordinate remediation with IT/DevOps, and produce actionable incident reports and executive summaries.Threat hunting &amp; malware analysis-Execute proactive hunts leveraging telemetry and threat intelligence (IOCs/TTPs); perform basic static/dynamic malware analysis and escalate complex analysis to forensics teams.Detection engineering &amp; tooling optimisation-Develop and tune SIEM correlation rules, EDR policies and SOAR playbooks to increase signal fidelity, reduce false positives and automate repetitive tasks.Vulnerability coordination &amp; risk remediation-Ingest vulnerability scan results, assess exploitability, prioritise remediation with owners and track closure against SLAs.Forensics &amp; log analysis-Collect and analyse host, network and cloud logs; conduct packet-level investigations and maintain chain-of-custody for evidence when required.Playbooks, documentation &amp; reporting-Maintain incident playbooks, runbooks, run regular tabletop exercises, and deliver KPIs and compliance reports (MTTD, MTTR, detection coverage) for management and auditors.-Collaboration &amp; capability building-Partner with engineering and operations to onboard services into monitoring, implement secure controls, and deliver staff training and awareness exercises.Shift &amp; on-call duties-Participate in SOC shift rotation and on-call roster to provide 24/7 detection and response coverage as required.Qualifications<ul><li>Experience: 3&ndash;5+ years in security operations, incident response, or SOC roles.</li><li>Technical expertise: Hands-on with SIEM (e.g., Splunk, QRadar, Elastic), EDR (CrowdStrike, Carbon Black, MS Defender), SOAR, IDS/NGFW, cloud security logging (AWS/Azure/GCP) and network forensics.</li><li>Skills: Proficient in log and packet analysis, threat hunting, basic malware analysis, scripting for automation (Python/Bash) and familiarity with MITRE ATT&amp;CK.</li><li>Certifications (preferred): GCIH, GCIA, GXPN, CISSP, CISM, or equivalent.</li><li>Attributes: Strong analytical reasoning, clear technical and executive communication, teamwork under pressure, and strict adherence to incident management processes.</li></ul>Job Type: Full-timePay: QAR25.00 - QAR35.00 per hourExpected hours: 40 per weekWork Location: In person

Security Analyst / SOC Analyst

Starlink Qatar

<div>
 
 Job Responsibilities:
 
 
 
 
 
 IAM Implementation &amp; Operations
 
 
 &bull; Deploy and configure enterprise IAM solutions (SSO, MFA, Federation, Azure Entra ID, SailPoint etc).
 
 
 &bull; Implement and manage IAM architectures for GCP (Cloud Identity, IAM, Workforce Identity Federation, Workload Identity Federation, Identity-Aware Proxy).
 
 
 &bull; Implement and manage IAM architectures for Azure (Entra ID, Conditional Access, Privileged Identity Management, Entitlement Management, Identity Protection).
 
 
 &bull; Contribute technical input to IAM roadmaps and architecture decisions.
 
 
 &bull; Support Zero Trust architecture implementations and adaptive authentication deployments.
 
 
 &bull; Integrate IAM solutions across on-premises IT and Operational Technology (OT) environments.
 
 
 &bull; Conduct regular access reviews to prevent privilege creep.
 
 
 Priveleged Access Management
 
 
 &bull; Implement and administer PAM solutions
 
 
 &bull; Secure privileged accounts and enforce Just-In-Time (JIT) models for privileged accounts.
 
 
 &bull; Configure privileged session management, recording, and monitoring.
 
 
 &bull; Conduct periodic privileged account reviews and attestations.
 
 
 &bull; Manage break-glass emergency access procedures.
 
 
 Identity Lifeccyle Management:
 
 
 &bull; Automate identity lifecycle management including joiner-mover-leaver processes.
 
 
 &bull; Implement automated provisioning and de-provisioning workflows across applications and systems.
 
 
 &bull; Configure Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models.
 
 
 Identity Governance &amp; Administration (IGA):
 
 
 &bull; Deploy and manage IGA platforms.
 
 
 &bull; Configure access certification campaigns and periodic access reviews.
 
 
 &bull; Implement Segregation of Duties (SoD) policies and conflict detection.
 
 
 &bull; Generate compliance reports and audit trails for regulatory requirements
 
 
 Cloud IAM Integration
 
 
 &bull; Integrate IAM solutions across multi-cloud environments (AWS IAM, Azure Entra ID, GCP Cloud Identity).
 
 
 &bull; Configure cross-cloud identity federation and single sign-on.
 
 
 Governance &amp; Collaboration
 
 
 &bull; Generate IAM metrics, dashboards, and KPIs for executive reporting.
 
 
 &bull; Monitor identity risk scores and implement risk-based access controls.
 
 
 &bull; Identify and remediate IAM-related risks and control gaps.
 
 
 &bull; Support incident response and investigations related to IAM and PAM.
 
 
 &bull; Generate IAM metrics, dashboards, and audit reports for compliance and governance.
 
 
 &bull; Ensure IAM policies, standards, and regulatory compliance requirements (ISO 27001, Qatar NIA, QCSF, PDPPL etc ) are consistently enforced.
 
 
 &bull; Collaborate with application owners, infrastructure teams, and business units on IAM requirements.
 
</div>

Security Operations Officer Data Security Specialist

Global Institute for Strategic & Security Studies

Strategic Intelligence AnalystAbout the OpportunityAre you passionate about analyzing global trends, security risks, and strategic developments that shape international decisions?We are seeking a Strategic Intelligence Analyst to join our growing research and advisory team in Doha. This role offers the opportunity to work on high-impact analytical projects involving geopolitical risk, business intelligence, and strategic forecasting.If you enjoy deep research, critical thinking, and turning complex data into actionable insights&mdash;this role is for you.What You&rsquo;ll Do<ul><li>Conduct research on geopolitical, economic, and security-related developments</li><li>Analyze intelligence data to identify trends, risks, and opportunities</li><li>Prepare detailed reports and strategic briefs for internal and client use</li><li>Monitor global news, policy changes, and regional developments</li><li>Support decision-making through data-driven insights and forecasting</li><li>Collaborate with analysts and consultants on strategic advisory projects</li><li>Develop intelligence summaries and presentations for leadership teams</li></ul>What We&rsquo;re Looking For<ul><li>Bachelor&rsquo;s degree in International Relations, Political Science, Security Studies, Economics, or related field</li><li>Strong analytical and critical thinking skills</li><li>Ability to interpret complex data and present clear insights</li><li>Excellent written and verbal communication skills</li><li>Familiarity with geopolitical analysis, risk assessment, or intelligence research</li><li>Proficiency in Microsoft Office (Excel, PowerPoint, Word)</li><li>Ability to work independently and in a team environment</li></ul>Preferred but not required:<ul><li>Experience in intelligence analysis, consulting, research, or policy advisory roles</li><li>Knowledge of Middle East regional dynamics</li></ul>Why Join Us<ul><li>Work on high-impact global research and strategic projects</li><li>Career growth opportunities in intelligence and advisory consulting</li><li>Exposure to international clients and policy-level research</li><li>Collaborative and professional working environment</li><li>Opportunity to build expertise in strategic intelligence and risk analysis</li></ul>How to ApplyIf you are ready to take your career in strategic intelligence to the next level, we encourage you to apply now.Submit your CV and a short cover letter highlighting your analytical experience.Job Type: Full-timePay: QAR12,000.00 - QAR22,000.00 per monthWork Location: In person

Strategic Intelligence Analyst

Explore 1508+ Security operations analyst in Doha this May. Find roles across top companies and apply now to boost your career.