enterprise reporting senior analyst

analyst-investment & strategy Jobs in Doha

analyst-investment & strategy

banking technical analyst

business analyst

business analyst - real estate background Jobs in Doha

soc analyst

Al Adyat consultancy

Job Summary: The SOC Analyst Level 1 is responsible for monitoring, detecting, and responding to security events and incidents within the organization. The role involves analyzing alerts from various security tools, escalating incidents when necessary, and maintaining documentation of security activities. This is an entry-level position for candidates looking to start a career in cybersecurity.Key Responsibilities:<ul><li>Monitor security alerts and events from SIEM (Security Information and Event Management) and other security tools.</li><li>Perform initial triage and analysis of security incidents.</li><li>Escalate confirmed incidents to Level 2 or appropriate teams.</li><li>Maintain accurate incident documentation and logs.</li><li>Assist in vulnerability management and routine security checks.</li><li>Follow standard operating procedures (SOPs) for incident response.</li><li>Stay updated on the latest cybersecurity threats and trends.</li></ul>Qualifications:<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Technology, Cybersecurity, or a related field.</li><li>Basic understanding of networking, firewalls, intrusion detection/prevention systems, and endpoint security.</li><li>Familiarity with SIEM tools such as Splunk, QRadar, or ArcSight is a plus.</li><li>Strong analytical and problem-solving skills.</li><li>Good communication skills, both written and verbal.</li><li>Willingness to work in shifts (if SOC operates 24/7).</li></ul>Preferred Certifications (Optional):<ul><li>CompTIA Security+</li><li>Cisco CCNA Security</li><li>EC-Council CEH (Certified Ethical Hacker)</li></ul>Working Conditions:<ul><li>Shift-based work depending on SOC operational hours.</li><li>Fast-paced environment requiring attention to detail and quick response to incidents.</li></ul>Career Path: Successful SOC Analyst L1 can progress to SOC Analyst L2, then to SOC Analyst L3, Threat Hunter, or Incident Response Specialist roles.Job Type: Full-timePay: QAR10,000.00 - QAR13,000.00 per monthEducation:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>SOC Analyst Level 1 (L1): 3 years (Required)</li></ul>Language:<ul><li>Arabic (Required)</li><li>English (Required)</li></ul>License/Certification:<ul><li>degree in Computer Science, Information Technology (Required)</li></ul>Location:<ul><li>Doha (Required)</li></ul>

SOC Analyst Level 1 (L1)

Arab Solutions

<div>
 
 Job Title:
 
 SOC Analyst &ndash; Level 2 (Threat Hunting OR Vulnerability Management)
 
 
 
 Role Summary
 
 
 
 We are seeking an experiencedSOC L2 Analyst with strong capabilities in threat hunting and / or vulnerability management, and advanced security operations. The ideal candidate will have hands-on expertise with Qualys or Tenable, strong operational experience in Palo Alto Cortex (XDR/XSIAM), Microsoft Sentinel, and working knowledge of Nozomi Networks (OT/ICS security monitoring).
 
 
 
 Key Responsibilities
 
 
 
 Perform advanced incident investigation, triage, and response across IT and OT environments
 
 
 Conduct proactive threat hunting using SIEM/XDR platforms
 
 
 Manage and remediate vulnerabilities using Qualys or Tenable
 
 
 Correlate alerts and telemetry within Microsoft Sentinel and Palo Alto Cortex
 
 
 Monitor and analyze OT network traffic using Nozomi Networks
 
 
 Develop and tune detection rules, playbooks, and automation workflows
 
 
 Support incident containment, eradication, and root cause analysis
 
 
 Produce technical reports and executive summaries
 
 
 
 Required Skills &amp; Experience
 
 
 
 3&ndash;6 years of SOC experience (L2 level)
 
 
 Proven threat hunting experience
 
 
 Hands-on vulnerability management experience (Qualys / Tenable)
 
 
 Strong experience with Palo Alto Cortex XDR/XSIAM
 
 
 Operational experience with Microsoft Sentinel (SIEM)
 
 
 Experience monitoring OT/ICS environments using Nozomi Networks
 
 
 Working knowledge of Solarwinds
 
 
 Understanding of Maximo IT
 
 
 Knowledge of MITRE ATT &amp; CK framework
 
 
 
 Experience With SOAR Automation Preferred
 
 
 
 Any experience within Gov, road maintenance, traffic management a bonus
 
 
 
 Preferred Certifications
 
 
 
 CEH, GCIA, GCED, SC-200, PCNSE, or equivalent + PA Cortex / XDR
 
 
 Skills: solarwinds,ceh,sc-200,gced,qualys,xsiam,ot/ics,xdr,soar,tenable,maximo it,pcnse,nozomi networks,siem,gcia
</div>

SOC Analyst Level 2 (Threat Hunting OR Vulnerability Management)

Forvis Mazars in Qatar

<div>Job responsibilities: 
<ul><li>Responsible for overall secure operation, administration, maintenance of tools and solutions used by Security Operations Center (further referenced as SOC). Responsibilities and duties are planned as follows:</li></ul>

<ul><li>Continuous maintenance of the systems, tools and solutions, as well as any other attached systems used by Security Operations Center; including configuration management and system updates.</li></ul>

<ul><li>Ensuring the overall health of the SIEM system, ticketing system, and other SOC technology components.</li></ul>

<ul><li>Manage verification, validation, tuning, health and collection of Security logs.</li></ul>

<ul><li>Deploy and tune SIEM Use Cases and Rules driven by security intelligence inputs.</li></ul>

<ul><li>Implementing use cases as required by Security Intel teams.</li></ul>

<ul><li>Manage and coordinate equipment and system staging, on-boarding, deployment, configuration &amp; troubleshooting.</li></ul>

<ul><li>Manage user access including user and group permissions updates for all SOC infrastructure solutions.</li></ul>

<ul><li>Ensuring that log sources are reporting the SIEM platform.</li></ul>

<ul><li>Generating reports as required by SOC management teams.</li></ul>

<ul><li>Configuration, management, performance &amp; capacity planning of SOC solution/products.</li></ul>

<ul><li>Support for POCs for new CSOC technology and advanced capabilities to adopt/implement</li></ul>

<ul><li>Review CSOC solution/products vendor announcements.</li></ul>

<ul><li>Should have good knowledge of systems, solutions and security tools and skills as follows:</li></ul>

<ul><li>Knowledge about MS Windows and UNIX based systems</li></ul>

<ul><li>Knowledge of various Virtualization Environments.</li></ul>

<ul><li>Knowledge of Security Solutions like EDR, Email filtering, Vulnerability Scanners etc.</li></ul>

<ul><li>Familiarity with Active Directory, Kerberos, and authentication mechanisms</li></ul>

<ul><li>Problem-solving skills to identify issues with systems</li></ul>

<ul><li>Communication with other teams to resolve issues</li></ul>

<ul><li>Communication with vendors related to maintenance of the SOC Systems
</li></ul>Required certifications:

<ul><li>System administration (IBM, Microsoft, Vmware, Nutanix..etc.)</li></ul>

<ul><li>Industry certifications (CompTIA, ITIL 4 Foundation... Etc)</li></ul></div>

CSOC System Admin

<div>Job responsibilities: 
<ul><li>Responsible for overall design, operation, maintenance and continuous improvement of the data, analytics and artificial intelligence platforms used by the Security Operations Center (further referenced as SOC). Responsibilities and duties are planned as follows:</li></ul>

<ul><li>Continuous maintenance of the data pipelines, analytics platforms and AI models used by the Security Operations Center; including data ingestion, normalization, feature extraction, model training and deployment.</li></ul>

<ul><li>Ensuring the overall health of the SOC data platform, analytics engines, machine learning models, and AI-assisted detection systems.</li></ul>

<ul><li>Manage verification, validation, tuning, and quality of security telemetry including logs, NetFlow/IPFIX, EDR data, threat intelligence feeds and other SOC data sources.</li></ul>

<ul><li>Develop, train, validate and tune machine learning and analytics models used for:</li></ul>

<ul><li>Anomaly detection</li></ul>

<ul><li>Threat classification</li></ul>

<ul><li>Behavioral analysis</li></ul>

<ul><li>Alert prioritization and risk scoring</li></ul>

<ul><li>Deploy and tune detection models and analytic use cases driven by security intelligence, threat hunting and incident response requirements.</li></ul>

<ul><li>Implement analytic use cases as required by Security Intelligence, Tier-2 and Tier-3 teams.</li></ul>

<ul><li>Manage and coordinate data source onboarding, integration, normalization, enrichment and troubleshooting for all SOC telemetry sources.</li></ul>

<ul><li>Manage access and permissions for data platforms, analytics environments and AI systems used by the SOC.</li></ul>

<ul><li>Ensure that security data sources are correctly feeding the analytics and AI platforms.</li></ul>

<ul><li>Generate analytical reports, dashboards and model outputs as required by SOC management, threat hunting and incident response teams.</li></ul>

<ul><li>Configuration, management, performance tuning and capacity planning of SOC data, analytics and AI platforms.</li></ul>

<ul><li>Support proof-of-concepts (POCs) for new SOC data sources, analytics techniques and AI-driven security capabilities.</li></ul>

<ul><li>Review vendor, open-source and research developments in security analytics, machine learning and AI relevant to SOC operations.</li></ul>

<ul><li>Should have good knowledge of systems, solutions and security tools and skills as follows:</li></ul>

<ul><li>Knowledge of MS Windows and UNIX-based systems.</li></ul>

<ul><li>Knowledge of data engineering and big-data platforms (data pipelines, stream processing, data lakes).</li></ul>

<ul><li>Knowledge of security telemetry including SIEM data models, NetFlow/IPFIX, EDR telemetry and threat intelligence formats.</li></ul>

<ul><li>Knowledge of machine learning and analytics techniques including anomaly detection, classification, clustering and statistical modeling.</li></ul>

<ul><li>Knowledge of AI-driven SOC technologies including LLM-based assistants, automated enrichment and detection analytics.</li></ul>

<ul><li>Familiarity with MITRE ATT&amp;CK, incident response lifecycle and threat hunting methodologies.</li></ul>

<ul><li>Problem-solving skills to identify data quality, detection gaps and model performance issues.</li></ul>

<ul><li>Communication with SOC teams (Tier-1, Tier-2, Tier-3) to align analytics and AI capabilities with operational needs.</li></ul>

<ul><li>Communication with vendors and data providers related to SOC analytics, telemetry and AI platforms.</li></ul>

Required certifications in:

<ul><li>Data engineering, analytics or AI platforms (Cloudera, Databricks, AWS, Azure, GCP, etc.)</li></ul></div>

CSOC Data Analyst L2

<div>Job responsibilities: 

Responsible to triage operating system related cyber security incidents as a member of Security Operations Center incident responders&rsquo; team second line.
Performs deep-dive incident analysis by correlating data from various sources; determines if a critical system or data set has been impacted; advises on remediation; provides support for new analytic methods for detecting threats.

<ul><li>Proactively monitoring the operating systems alert queue using multiple tools, such as SIEM, EDR and custom-built system monitoring tools.</li></ul>

<ul><li>Conducting triage of alerts to identify potential, false positives, policy violations, intrusion attempts and compromises on the system level.</li></ul>

<ul><li>Consolidating data from alert triage to provide context necessary to escalate Tier 3 Analyst.
</li></ul><ul><li>Escalate to Tier 3 Analyst with all necessary data for deeper analysis and review.</li></ul>

<ul><li>Collecting evidence on operating system level for Incident analysis.</li></ul>

<ul><li>Advises on remediation.</li></ul>

<ul><li>Supporting operating system related security controls management.</li></ul>

<ul><li>Supporting operating system related threat detection analytics.</li></ul>

Should have good knowledge of security tools and skills as follows:

<ul><li>Knowledge about MS Windows and UNIX based systems</li></ul>

<ul><li>Knowledge TCP/IP version 4 and version 6</li></ul>

<ul><li>Manual testing skills</li></ul>

<ul><li>Automation testing skills</li></ul>

<ul><li>Technical writing skills</li></ul>

<ul><li>Problem solving skills and attention for detail</li></ul>

<ul><li>Malware analysis sandboxing solution, Security Event and Incident Monitoring System (SIEM), Orchestration tool and playbook response concept, Endpoint Detection and Response tool (EDR), Anti-malware systems, Intrusion Detection and Prevention Systems, Firewalls.</li></ul>

Required industry certificates:

<ul><li>ECC CEH &ndash; Certified Ethical Hacker - in good standing</li></ul>

<ul><li>some of SANS, GIAC, ISACA, (ISC)2 certificates or trainings - in good standing</li></ul>

Recommended industry certificates:

<ul><li>SANS, GIAC, ISACA, (ISC)2</li></ul></div>

CSOC Analyst L2

QatarEnergy

<div>
 
 Primary Purpose Of The Job
 
 
 
 Responsible for managing QatarEnergy IT and OT / Industrial Cyber Security centralized security log management (SIEM-Security Information Event Management/ SOAR, EDR other SOC platforms) functions. Use variety of tools to analyse and investigate incidents and take immediate action or recommend a course of action to safeguard QatarEnergy.
 
 
 
 Required Experience And Skills
 
 
 
 5+ years&rsquo; experience working in a large-scale IT environment with focus on Information Security, and knowledge of Operational Technology.
 
 
 <ul>
 <li>
 2+ years&rsquo; operating experience in industry leading SIEM products. Solid understanding of SIEM (Security Information and Event Management System) technology, architecture, locating sources and rule creation with commercial market leader Cyber Security products.
 </li>
 <li>
 1-3 years previous Security Operations Centre Experience in conducting security engineering is a plus.
 </li>
 <li>
 Good knowledge of IT including multiple operating systems and system administration skills (Windows, Unix, Linux network platforms)
 </li>
 <li>
 Good Knowledge of OT systems and their potential risks and threats
 </li>
 <li>
 Good knowledge of client-server applications, multi-tier web applications, relational databases.
 </li>
 <li>
 Solid knowledge of security products such as Active Directory Auditing, Authentication, Firewalls, Intrusion Detection and Prevention Systems, and a variety of other related security technologies and host event logs.
 </li>
 <li>
 Strong understanding of Operating systems hardening.
 </li>
 <li>
 Strong understanding of networking principles including TCP/IP, WANs, LANs, and commonly used Internet protocols.
 </li>
 <li>
 Scripting Experience (e.g. Python, Perl, and PowerShell)
 </li>
 <li>
 Certification in at least one industry leading SIEM product. Possession of Industry Certifications (SANS, GCIA, ICS2, (CEH), (CISSP), EC Council, and SIEM/ security tool equivalent technical certifications).
 </li>
 <li>
 Good understanding of Security frameworks and techniques.
 </li>
 <li>
 Good understanding of forensic tools and capabilities.
 </li>
 <li>
 Good understanding of manding Vulnerability management system
 
 
 </li>
 </ul>
 
 Educational Qualifications
 
 
 
 Bachelor degree in information security, computer science, or systems engineering.
</div>

SECURITY ENGINEER

Starlink Qatar

<div>
 
 The
 
 Security Management Lead
 
 serves as the senior technical security expert and architect within the MVO (Minimum viable Operations) framework, providing strategic security leadership across the cloud platform. This role defines security architecture, establishes security standards, and provides technical direction to internal teams and external security contractors (SOC, Firewall). Working under the Digital Infrastructure Architect, this position focuses on technical security excellence, architectural design, and cross-functional security coordination. The role requires deep expertise in cloud security architecture, threat management, and the ability to provide expert technical guidance in a multi stakeholder environment.
 
 
 
 
 
 
 DUTIES &amp; RESPONSIBILITIES
 
 
 
 
 
 
 
 
 <ul>
 <li>
 Define and maintain comprehensive security architecture for Azure cloud platform and smart city infrastructure
 </li>
 <li>
 Establish security standards, best practices, and technical security policies aligned with platform requirements
 </li>
 <li>
 Provide technical security direction and expert guidance to SOC on threat detection, incident response, and SIEM operations
 </li>
 <li>
 Define technical requirements and security specifications for Firewall and WAF, firewall rules, and traffic protection
 </li>
 <li>
 Lead technical security incident response activities and provide expert analysis during major security events
 </li>
 <li>
 Conduct security architecture reviews, threat modeling, and security assessments across all platform components
 </li>
 <li>
 Design security controls framework including encryption strategies, access management, and network security architecture
 </li>
 <li>
 Collaborate with Network Engineer on network security architecture, segmentation design, and traffic protection strategies
 </li>
 <li>
 Provide technical directions to Cloud Security SME on Azure security implementation and best practices
 </li>
 <li>
 Interface with Operations Manager on technical security aspects of contractor performance and deliverables
 </li>
 <li>
 Coordinate with Compliance Manager to ensure security controls meet regulatory and compliance requirements
 </li>
 <li>
 Review and validate security configurations, incident reports, and recommendations from SOC and Firewall SMEs
 </li>
 <li>
 Make strategic security technology decisions and evaluate new security tools and capabilities
 </li>
 <li>
 Lead security roadmap planning and align security initiatives with technology strategy
 </li>
 <li>
 Conduct security training and awareness sessions for internal technical teams
 </li>
 <li>
 Participate in capacity planning for security infrastructure and ensure scalability of security architecture
 </li>
 </ul>
 
 
 
 
 
 SKILLS &amp; ABILITIES
 
 
 
 
 
 <ul>
 <li>
 Extensive experience designing and implementing enterprise security architectures in Azure cloud environments
 </li>
 <li>
 Deep expertise in security frameworks, standards (ISO 27001, NIST), and cloud security best practices
 </li>
 <li>
 Strong knowledge of SIEM platforms, threat intelligence frameworks, and security automation technologies
 </li>
 <li>
 Expert understanding of network security architecture, firewalls, WAF, and DDoS protection strategies
 </li>
 <li>
 Proven ability to provide technical leadership and mentor security professionals
 </li>
 <li>
 Strong experience working with security service providers and providing technical direction to external teams
 </li>
 <li>
 Excellent analytical and problem-solving skills for security architecture challenges and incident analysis
 </li>
 <li>
 Advanced knowledge of Azure security services including Defender for Cloud, Sentinel, and Azure Monitor
 </li>
 <li>
 Experience with Palo Alto Networks firewall technologies and web application firewalls
 </li>
 <li>
 Strong communication skills with ability to articulate security concepts to technical and business audiences
 </li>
 <li>
 Ability to balance security requirements with operational and business needs
 </li>
 <li>
 Experience in Services Integrator or multi-vendor environments
 </li>
 <li>
 Proficiency in security risk assessment and threat modeling methodologies
 </li>
 </ul>
 
 
 
 
 
 
 
 
 Required Certifications
 
 
 
 
 
 
 Industry Security Certifications (minimum 2 required):
 
 
 
 
 <ul>
 <li>
 CISSP (Certified Information Systems Security Professional)
 </li>
 <li>
 CISM (Certified Information Security Manager)
 </li>
 <li>
 CISA (Certified Information Systems Auditor)
 </li>
 <li>
 CEH (Certified Ethical Hacker)
 </li>
 </ul>
 
 
 
 
 Cloud &amp; Technology Certifications (minimum 1 required):
 
 
 
 
 <ul>
 <li>
 Microsoft Certified: Azure Security Engineer Associate (AZ-500)
 </li>
 <li>
 Microsoft Certified: Security Operations Analyst Associate (SC-200)
 </li>
 <li>
 Palo Alto Networks Certified Network Security Engineer (PCNSE)
 </li>
 <li>
 Palo Alto Networks Certified Security Automation Engineer (PCSAE)
 </li>
 </ul>
 
 
 
 
 
 Preferred Additional Certifications
 
 
 
 
 
 <ul>
 <li>
 GIAC Security Essentials (GSEC) or GIAC Certified Incident Handler (GCIH)
 </li>
 <li>
 ISO 27001 Lead Auditor/Implementer
 </li>
 <li>
 Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
 </li>
 </ul>
 
 
</div>

Security Management Lead

Explore 37+ Soc analyst in Doha this March. Find roles across top companies and apply now to boost your career.