data analyst

sr. economic analyst

ict analyst / specialist (expert & senior expert levels) Jobs in Doha

ict analyst / specialist (expert & senior expert levels)

pricing analyst

project analyst

soc analyst

FIN Hospitality

<p><b>Job Profile: Cyber Security Operations Center (SOC) Analyst</b> <b>(Mid&ndash;Senior Level)</b></p><p><b>Location:</b> Doha, Qatar</p><p><b>Availability:</b> Starting January 26<br/><b>Employment Type:</b> Full-time</p><p><b>Target Salary Range</b> <b>(total package)</b>: 25k to 30k</p><p><b>Mandatory Requirements</b></p><ul><li><b>Experience:</b> Minimum 4&ndash;7 years of experience as a SOC Analyst or in a related cybersecurity role (mid to senior level)</li><li><b>Language:</b> Fluent in English (written and spoken)</li><li><b>Availability:</b> Ready to join by <b>January 26</b></li><li><b>License:</b> Valid <b>driving license</b></li><li>Strong <b>hands-on attitude with systems and security tools</b>, including configuration, troubleshooting, and optimization</li><li>In-depth understanding of security frameworks (MITRE ATT&amp;CK, NIST, ISO 27001, etc.)</li><li>Proficiency with SIEM tools such as Sentinel, Splunk, or QRadara</li></ul><p><b>Preferred Qualifications (Plus Points)</b></p><ul><li><b>Arabic speaker</b></li><li><b>Experience in the Oil &amp; Gas sector</b>, particularly in industrial control systems (ICS) or OT security</li><li>Relevant certifications such as <b>GCIA, GCIH, CEH, CompTIA Security+, or CISSP</b></li></ul><p><b>Key Responsibilities</b></p><ul><li>Monitor, analyze, and respond to security alerts from various systems and tools (SIEM, IDS/IPS, firewalls, endpoint protection, etc.)</li><li>Investigate and triage security incidents, identifying root causes and implementing corrective actions</li><li>Conduct threat hunting and vulnerability assessments to identify potential risks</li><li>Develop and maintain incident response procedures and playbooks</li><li>Collaborate with IT and network teams to improve security posture and incident response readiness</li></ul><p>Job Types: Full-time, Permanent</p><p>Pay: QAR25,000.00 - QAR30,000.00 per month</p>

SOC (cyber security operation center) analyst (Mid–Senior Level)

QatarEnergy LNG

<div>
 Job description:
 <br/>
 <br/>
 <strong>
  Job Specification
 </strong>
 Job Purpose
 <p>
  Safeguarding the organization&rsquo;s IT and OT environments by detecting, investigating, and proactively hunting for cyber threats. The role bridges intelligence and operations, turning threat data into actionable detections and hunt activities. Working closely with SOC Team, the specialist enhances detection capabilities and strengthens the organization&rsquo;s overall cyber resilience.
 </p>
 Job Context &amp; Major Challenge(s)
 <p>
  Major challenges are,
 </p>
 <p>
  (1)Keeping pace with evolving threat landscape as attackers develop new techniques and strategies.
 </p>
 <p>
  (2)Thorough understanding of security operations centre (SOC) 24x7
 </p>
 <p>
  (3) supporting the Information Risk Management Division Manager in dealing with an increased cybersecurity risk due to the geopolitical situation
 </p>
 <p>
  (4) Contributing to the ongoing continuous improvement of SOC due to the current maturity level and the changing threat level
 </p>
 <p>
  (5) Keeping up to date with IT and OT cyber threats to stay ahead of such threats.
 </p>
 Key Job Accountabilities - I
 <ul>
  <li>
   Perform proactive threat hunting across IT and OT networks using intelligence from the Threat Analyst to uncover stealthy or undetected threats.
  </li>
  <li>
   Analyse and correlate security incidents to understand attacker behaviour, techniques, and campaign patterns beyond simple alerts.
  </li>
  <li>
   Bridge threat intelligence with detection logic, translating new IOCs, TTPs, and adversary trends into actionable detection content for the SOC Engineer to implement.
  </li>
  <li>
   Conduct deep-dive investigations on high-severity alerts, ensuring accurate root cause determination and actionable recommendations.
  </li>
  <li>
   Support incident response teams during containment and eradication phases by providing context on attacker tools, tactics, and infrastructure.
  </li>
  <li>
   Collaborate with the SOC Engineer to refine SIEM use cases, detection rules, and SOAR playbooks based on threat hunting outcomes.
  </li>
  <li>
   Perform malware reverse engineering and behavioural analysis, extracting IOCs, YARA rules and technical findings to feed into threat hunting and detection development.
  </li>
  <li>
   Develop and maintain threat profiles for key adversaries and attack scenarios targeting both IT and OT environments.
  </li>
  <li>
   Prepare technical briefings reports summarizing threat findings and lessons learned for management.
  </li>
  <li>
   Continuously improve analytical techniques, staying current with emerging threats, tools, and frameworks like MITRE ATT&amp;CK.
  </li>
  <li>
   Ensure alignment with legal and ethical guidelines to ensure team activities are authorized and do not compromise company&rsquo;s integrity or reputation.
  </li>
 </ul>
 <strong>
  Person Specification - Minimum Requirement
 </strong>
 Qualifications
 <ul>
  <li>
   Bachelor degree level in information security, computer science or engineering.
  </li>
  <li>
   Holds a relevant professional certification such as (e.g., GCTI, GCIA, GCIH, GREM).
  </li>
 </ul>
 Knowledge and/or Experience
 <ul>
  <li>
   10 years Information Security experience in a similar position.
  </li>
  <li>
   Proven experience in cyber threat analysis, hunting, and incident investigation across both IT and OT environments.
  </li>
  <li>
   Strong understanding of network protocols, malware behaviour, and adversary TTPs aligned with the MITRE ATT&amp;CK framework.
  </li>
  <li>
   Experience with SIEM/SOAR platforms, threat intelligence tools, and log analysis for advanced threat detection.
  </li>
  <li>
   Strong analytical and investigative skills with hands-on experience in threat hunting.
  </li>
 </ul>
 Technical and Business Skills
 <ul>
  <li>
   Ability to assess and evaluate risk and the impact of legislation and actively promotes compliance.
  </li>
  <li>
   Possesses a good understanding of IT and OT business applications.
  </li>
 </ul>
</div>


Cyber Threat Specialist

QatarEnergy

<div></div><div><p><b>Job Posting Date: </b>15 Oct 2025
</p><p><b>Work Location:</b> Doha, QA
</p><p><b>Company: </b>QatarEnergy LNG
</p><div><div><div><div><h2 class="jobSectionHeader"><b>Job Specification</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Job Purpose</b></h2>
</div><div><p>
Safeguarding the organization&rsquo;s IT and OT environments by detecting, investigating, and proactively hunting for cyber threats. The role bridges intelligence and operations, turning threat data into actionable detections and hunt activities. Working closely with SOC Team, the specialist enhances detection capabilities and strengthens the organization&rsquo;s overall cyber resilience.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Job Context &amp; Major Challenge(s)
</b></h2></div><div><p>Major challenges are,</p>
<p>
(1)Keeping pace with evolving threat landscape as attackers develop new techniques and strategies.</p>
<p>
(2)Thorough understanding of security operations centre (SOC) 24x7</p>
<p>
(3) supporting the Information Risk Management Division Manager in dealing with an increased cybersecurity risk due to the geopolitical situation</p>
<p>
(4) Contributing to the ongoing continuous improvement of SOC due to the current maturity level and the changing threat level</p>
<p>
(5) Keeping up to date with IT and OT cyber threats to stay ahead of such threats.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Key Job Accountabilities - I</b></h2>
</div><div><ul><li>Perform proactive threat hunting across IT and OT networks using intelligence from the Threat Analyst to uncover stealthy or undetected threats.</li>
<li>Analyse and correlate security incidents to understand attacker behaviour, techniques, and campaign patterns beyond simple alerts.</li>
<li>Bridge threat intelligence with detection logic, translating new IOCs, TTPs, and adversary trends into actionable detection content for the SOC Engineer to implement.</li>
<li>Conduct deep-dive investigations on high-severity alerts, ensuring accurate root cause determination and actionable recommendations.</li>
<li>Support incident response teams during containment and eradication phases by providing context on attacker tools, tactics, and infrastructure.</li>
<li>Collaborate with the SOC Engineer to refine SIEM use cases, detection rules, and SOAR playbooks based on threat hunting outcomes.</li>
<li>Perform malware reverse engineering and behavioural analysis, extracting IOCs, YARA rules and technical findings to feed into threat hunting and detection development.</li>
<li>Develop and maintain threat profiles for key adversaries and attack scenarios targeting both IT and OT environments.</li>
<li>Prepare technical briefings reports summarizing threat findings and lessons learned for management.</li>
<li>Continuously improve analytical techniques, staying current with emerging threats, tools, and frameworks like MITRE ATT&amp;CK.</li>
<li>Ensure alignment with legal and ethical guidelines to ensure team activities are authorized and do not compromise company&rsquo;s integrity or reputation.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Person Specification - Minimum Requirement</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Qualifications</b></h2>
</div><div><ul><li>Bachelor degree level in information security, computer science or engineering.</li>
<li>Holds a relevant professional certification such as (e.g., GCTI, GCIA, GCIH, GREM).</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Knowledge and/or Experience
</b></h2></div><div><ul><li>10 years Information Security experience in a similar position.</li>
<li>Proven experience in cyber threat analysis, hunting, and incident investigation across both IT and OT environments.</li>
<li>Strong understanding of network protocols, malware behaviour, and adversary TTPs aligned with the MITRE ATT&amp;CK framework.</li>
<li>Experience with SIEM/SOAR platforms, threat intelligence tools, and log analysis for advanced threat detection.</li>
<li>Strong analytical and investigative skills with hands-on experience in threat hunting.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Technical and Business Skills</b></h2>
</div><div><ul><li>Ability to assess and evaluate risk and the impact of legislation and actively promotes compliance.</li>
<li>Possesses a good understanding of IT and OT business applications.</li></ul></div></div></div></div></div><p></p>

Starlink Qatar

<div>
 <p>
  <strong>
   📌 𝗗𝗲𝘀𝗰𝗿𝗶𝗽𝘁𝗶𝗼𝗻:
  </strong>
 </p>
 <p>
  <strong>
   We are seeking a highly skilled L2 Security Analyst to join our Security Operations Center (SOC) team, deployed at Ooredoo's headquarters in Doha. In this role, you will be a key player in defending against sophisticated cyber threats within a cutting-edge hybrid environment. You will serve as the primary technical escalation point for L1 analysts, leveraging your deep expertise in Splunk Enterprise Security and Google Cloud security technologies like Chronicle and Security Command Center. Your responsibilities will include advanced incident investigation, proactive threat hunting, and engineering robust detection mechanisms. This position is crucial for enhancing our operational resilience by improving detection logic, automating response actions, and ensuring rapid containment of security incidents. You will collaborate closely with various security teams to strengthen Ooredoo's overall security posture.
  </strong>
 </p>
 <p>
  <strong>
   ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   🎯 𝗥𝗲𝗾𝘂𝗶𝗿𝗲𝗺𝗲𝗻𝘁𝘀:
  </strong>
 </p>
 <p>
  <strong>
   &rtrif; Strong hands-on experience with Splunk Enterprise Security (ES), including creating advanced SPL queries and custom correlation searches.
  </strong>
 </p>
 <p>
  <strong>
   &rtrif; Demonstrated expertise in Google Chronicle SIEM for threat hunting and Google Cloud Security Command Center (SCC) for incident analysis.
  </strong>
 </p>
 <p>
  <strong>
   &rtrif; Proficiency with Endpoint Detection and Response (EDR) tools such as Trellix EDR and Microsoft Defender for Endpoint.
  </strong>
 </p>
 <p>
  <strong>
   &rtrif; Solid understanding of network protocols, firewalls, IDS/IPS, endpoint logs, and authentication systems.
  </strong>
 </p>
 <p>
  <strong>
   &rtrif; Proven ability to conduct root-cause analysis by correlating data from multiple security sources (SIEM, EDR, Cloud).
  </strong>
 </p>
 <p>
  <strong>
   &rtrif; Experience in developing custom detection rules and use cases mapped to the MITRE ATT&amp;CK framework.
  </strong>
 </p>
 <p>
  <strong>
   &rtrif; Working knowledge of scripting languages like Python, PowerShell, or Bash for security automation and data manipulation.
  </strong>
 </p>
 <p>
  <strong>
   &rtrif; Experience with BigQuery for analyzing large-scale security datasets.
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   ✨ 𝗗𝗲𝘀𝗶𝗿𝗮𝗯𝗹𝗲𝘀:
  </strong>
 </p>
 <p>
  <strong>
   &rtrif; Professional certifications such as Splunk Certified Power User/Admin, Google Cloud Certified Security Engineer, GCIH, or CEH.
  </strong>
 </p>
 <p>
  <strong>
   &rtrif; Bachelor&rsquo;s degree in Computer Science, Information Security, or a related discipline.
  </strong>
 </p>
 <p>
  <strong>
   &rtrif; Experience with Security Orchestration, Automation, and Response (SOAR) platforms, particularly Splunk Phantom.
  </strong>
 </p>
 <p>
  <strong>
   &rtrif; Familiarity with compliance frameworks like ISO 27001, QCB, or NIA.
  </strong>
 </p>
 <p>
  <strong>
   &rtrif; Previous experience in mentoring junior security analysts.
  </strong>
 </p>
 <p>
 </p>
</div>


L2 Security Analyst (Splunk & Google Technologies)

Al Adyat consultancy

<p>The <b>SIEM Administrator</b> is responsible for implementing, maintaining, and optimizing the Security Information and Event Management (SIEM) platform to ensure continuous monitoring, threat detection, and incident response across the organization&rsquo;s IT environment. This role involves managing SIEM configurations, integrating various log sources, developing correlation rules, and ensuring data integrity and performance. The SIEM Administrator works closely with SOC analysts, system administrators, and cybersecurity teams to enhance the organization&rsquo;s overall security posture.</p><p><b>Key Responsibilities:</b></p><ul><li><b>SIEM Platform Management:</b></li><li>Install, configure, and maintain SIEM tools (e.g., Splunk, IBM QRadar, ArcSight, Sentinel, LogRhythm).</li><li><b>3 years&rsquo; experience on Microsoft Sentinel and app logic.</b></li><li>Manage system health, performance tuning, and upgrades to ensure optimal operation.</li><li>Integrate diverse log sources from servers, firewalls, applications, cloud services, and endpoints.</li><li><b>Log Management and Correlation:</b></li><li>Define and implement log collection policies and normalization standards.</li><li>Develop and fine-tune correlation rules, alerts, and dashboards to detect potential threats and anomalies.</li><li>Validate and troubleshoot log ingestion issues to ensure complete visibility across systems.</li><li><b>Security Operations Support:</b></li><li>Collaborate with SOC teams to improve incident detection, analysis, and response processes.</li><li>Support incident investigations by providing detailed log analysis and event correlation.</li><li>Maintain incident response playbooks and automate repetitive detection tasks where possible.</li><li><b>Compliance and Reporting:</b></li><li>Ensure SIEM logging and monitoring align with compliance frameworks (ISO 27001, NIST, GDPR, etc.).</li><li>Generate regular reports and dashboards for management and audit purposes.</li><li>Document configurations, procedures, and change logs for audit readiness.</li><li><b>Continuous Improvement:</b></li><li>Research emerging threats and update SIEM detection content accordingly.</li><li>Evaluate and recommend enhancements to SIEM architecture and data sources.</li><li>Conduct periodic health checks and capacity planning for the SIEM environment.</li></ul><p><b>Qualifications and Skills:</b></p><ul><li><b>Education:</b></li><li>Bachelor&rsquo;s degree in computer science, Information Security, or a related field.</li><li>Master&rsquo;s degree or relevant certifications preferred.</li><li><b>Certifications (Preferred):</b></li><li>SIEM-specific certifications (e.g., Splunk Certified Administrator, QRadar Certified, Microsoft Sentinel).</li><li>Security certifications such as CompTIA Security+, CEH, CISSP, or GIAC.</li><li><b>Technical Skills:</b></li><li>Strong knowledge of log management, event correlation, and network protocols.</li><li>Hands-on experience with SIEM tools (Splunk, QRadar, ArcSight, Sentinel, etc.).</li><li>Familiarity with firewalls, IDS/IPS, endpoint protection, and threat intelligence platforms.</li><li>Scripting knowledge (Python, PowerShell, or Bash) for automation and integration.</li><li>Experience with cloud environments (AWS, Azure, GCP) and their native security logging tools.</li><li><b>Soft Skills:</b></li><li>Strong analytical and problem-solving abilities.</li><li>Excellent communication and documentation skills.</li><li>Ability to work under pressure in a fast-paced security operations environment.</li><li>Attention to detail and commitment to maintaining system integrity and confidentiality.</li></ul><p><b>Experience Required:</b></p><ul><li>3&ndash;5 years of experience in cybersecurity, with at least 2 years focusing on SIEM administration or engineering.</li></ul><p>Experience working in a SOC or enterprise security environment is highly desirable.</p><p>Job Type: Full-time</p><p>Pay: QAR14,000.00 - QAR16,000.00 per month</p><p>Education:</p><ul><li>Bachelor's (Required)</li></ul><p>Experience:</p><ul><li>3 years&rsquo; experience on Microsoft Sentinel and app logic: 3 years (Required)</li><li>focusing on SIEM administration or engineering: 2 years (Required)</li><li>cybersecurity: 3 years (Required)</li></ul><p>Language:</p><ul><li>Arabic (Required)</li><li>English (Required)</li></ul><p>License/Certification:</p><ul><li>degree in computer science, Information Security (Required)</li></ul>

SIEM Administrator – Cybersecurity

Naufar

<div>
 <p>
  <strong>
   JOB PURPOSE:
  </strong>
 </p>
 <p>
  The Cyber Security Analyst creates a comprehensive program for establishing a Healthcare carrier-class Security Operation Center. S/he develop and maintain threat monitoring and security incident response procedures within Naufar. The analyst designs frameworks, procedures, and toolkits to enhance capabilities in professional forensic collection and digital evidence analysis. S/he also develop dashboards for reporting the organization's threat landscape, Awareness and security posture to senior management. This role is expert role with roles and responsibilities.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Description
  </strong>
 </p>
 <ul>
  <li>
   Develops and implements a cyber-security program to enhance Naufar capabilities regarding Cyber Attack incident monitoring, incidents response and intrusive and non-intrusive forensics capabilities.
  </li>
  <li>
   Develops and matures the service capabilities of the SOC, such as Forensics, Threat Management, Penetration Assessments, and Tool Management.
  </li>
  <li>
   Develops, Contributes and maintains of the cyber security strategy.
  </li>
  <li>
   Implements, configures and maintains security control and process, to ensure threat indicators are rated by severity and responded to in a manner consistent with the threat.
  </li>
  <li>
   Identifies deficiencies and recommends corrective action to strengthen information security control and decrease the risk of data breach.
  </li>
  <li>
   Maintains and updates standard operation policies and procedures for incident response plans, e-discovery processing, remote acquisition/analysis tools, collections and forensic analysis techniques.
  </li>
  <li>
   Maintains industry standard tools and processes used for forensic analysis and eDiscovery collections and processes.
  </li>
  <li>
   Monitors security alerts for potential events/incidents as well as trending and historical analysis and ensuring all incident reports are complete and written within standard operations and ensures ticket audits and reviews are completed
  </li>
  <li>
   Utilizes leading forensic software to identify, collect, preserve and analyze electronic data from laptops, desktops, servers, email archives, infrastructure logs, network file servers, backup tapes, cell phones, PDAs and a wide variety of other media devices.
  </li>
  <li>
   Manages requests for electronic data and digital forensic investigations that relate to Litigation, Regulatory matters, Compliance, and Employee Investigations.
  </li>
  <li>
   Performs cybersecurity incident analysis and assist with incident response, including analysis of network content and metadata for investigations or malware detection and identifies the cause and extent of a breach.
  </li>
  <li>
   Serves as a subject matter expert and technical advisor in matters relating to the proper collection, preservation, packaging, and submission of digital and multimedia evidence.
  </li>
  <li>
   Participates in incident electronic evidence collection activities in major field investigations. Ensures evidence handling requirements are met.
  </li>
  <li>
   Performs post-incident report according to standard operations.
  </li>
  <li>
   Analyzes the tools and methodology used for investigation and accordingly presents improvements in control and corrective actions if any.
  </li>
  <li>
   Escalates and works with senior management on resolutions to overdue security items or any negative trends identified.
  </li>
  <li>
   Develops focused reporting and briefings for advanced cyber threats.
  </li>
  <li>
   Conducts studies and research for improving forensic analyses, scientific methods, and resolving forensic examination problems.
  </li>
  <li>
   Creates detailed, professional documentation and reports, including performance metrics and presentations for management.
  </li>
  <li>
   Leads or contributes to key projects related to corporate threat monitoring, forensics or information security initiatives.
  </li>
  <li>
   Facilitates group risk assessment activities and identifies any security-related process improvement opportunities.
  </li>
  <li>
   Monitors and performs trending on root cause analysis activities within assigned group and participates as needed to resolve clinical systems security related incidents.
  </li>
  <li>
   Assists on monitoring compliance with information security policies, standards and ENTERPRISE-WIDE strategy and facilitates threat and vulnerability evaluations on a regular basis. Measures and reports on the effectiveness of information security controls.
  </li>
  <li>
   Supports the security initiatives, corrective and preventative actions, and security measures by ensuring timely updates and escalating concerns and non-compliances.
  </li>
  <li>
   Understands and maintains the appropriate knowledge of Security Technologies, (Firewall, Anti-Virus, Email and Web Encryption, HIPS, NIPS, SIEM, WAF, DLP), security procedures, and services within Naufar IT Security as well as ensures all tools are functioning properly.
  </li>
  <li>
   Keeps up to date on changes to significant regulatory and applicable standards issued by internal or external agencies, as applicable to the Naufar&rsquo;s domain.
  </li>
  <li>
   Adheres to Naufar&rsquo;s standards as they appear in the Code of Conduct and Conflict of Interest policies
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Academic Qualifications:
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree &ndash; IT - Mandate
  </li>
  <li>
   Master&rsquo;s degree &ndash; Cybersecurity - Desired
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Experience Requirements:
  </strong>
 </p>
 <ul>
  <li>
   8+ years of experience working as a security analyst or SME within a Security Operations Center with exposure to cyber security collection, analysis and threats management, investigation and digital forensics.
  </li>
  <li>
   Demonstrated experience in threat detection and analysis, incident response, and reporting.
  </li>
  <li>
   Demonstrated experience with incident response, deep dive forensics, insider threat, cyber and data exfiltration incidents.
  </li>
  <li>
   Demonstrated experience conducting assessments, digital forensic investigations, vulnerability management and incident response.
  </li>
  <li>
   Demonstrated experience with current cyber threats and the associated tactics, techniques, and procedures used to infiltrate computer networks.
  </li>
  <li>
   Demonstrated experience with SEIM products in the detection, response, mitigation, and/or reporting of cyber threats
  </li>
  <li>
   Demonstrated experience in the use of forensic tools (e.g. FTK, Encase, Forensic Toolkit, X-Ways, Linux based tools, etc.)
  </li>
  <li>
   Experienced with (or equivalent) the following regulations and frameworks: PCI, HIPAA, and ISO/IEC 2700x
  </li>
 </ul>
</div>


Cyber Security Analyst

Hamad International Airport

<div>
 <p>
  <strong>
   <u>
    About Role
   </u>
  </strong>
 </p>
 <p>
  You would be part of the Cyber Security Incident Response team with an operational role to quickly identify, respond to cyber incidents to our global infrastructure. This is a hands-on technical cyber security role with expertise in Security incident response and in the areas of endpoint security, application security, network security or Cloud security.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    <br/>
    Role and Responsibilities
   </u>
  </strong>
 </p>
 <ul>
  <li>
   :Assist and/or lead investigations in active security incident scenarios, supporting the organization through the Incident Response lifecycl
  </li>
  <li>
   eProvide expertise in the triage, escalate and respond to potential security events &amp; incidents and provides support to security team
  </li>
  <li>
   sMust also be able to participate in rotating on call schedule and must be able to work collaboratively. Having the ability to work outside of normal working hours as required due to critical incidents or emergency calls, will be essential to success in this role
  </li>
  <li>
   .Proactively hunting threats in the environment, identifying new risk, and developing methods to proactively address threats
  </li>
  <li>
   .Provide cyber&ndash;Incident Response expertise and perform Malware Analysis &amp; reverse engineering of malware
  </li>
  <li>
   .Perform forensic analysis in response to cyber-attacks and computer security breaches on systems and networks to identify the extent and nature of the compromise and provide recommendations on containment, eradication, and remediation steps
  </li>
  <li>
   .Routinely prepare written technical documentation and reports of findings, along with recommendations, that result from cases involving forensic analysis and incident response
  </li>
  <li>
   .Develop and update operational playbook for various cyber incident scenarios including Data breach, ransomware, supply chain compromise etc.
  </li>
  <li>
   ,Responsible for identification, analysis, and correlation of events of interest, escalation and continued monitoring of cybersecurity events on an enterprise-wide basis
  </li>
  <li>
   .Analyze various log, network, malware, forensic, and cyber threat intel to validate security threats, recommend appropriate countermeasures, and assess impact of cyber incidents
  </li>
  <li>
   .Assist the Cyber Security manager in the analysis of security breaches to identify the root cause and to implement preventive measures
  </li>
 </ul>
 <p>
  <br/>
 </p>
 .
</div>


Technology Services Controller (Cyber Security Incident Response)

Explore 71+ Soc analyst in Doha this November. Find roles across top companies and apply now to boost your career.

71 soc analyst jobs IN Doha

SOC (cyber security operation center) analyst (Mid–Senior Level)

Cyber Threat Specialist

Cyber Threat Specialist

L2 Security Analyst (Splunk & Google Technologies)

SIEM Administrator – Cybersecurity

Cyber Security Analyst

Technology Services Controller (Cyber Security Incident Response)