information security specialist Jobs in Doha

information security specialist

assistant it manager

cyber security

cyber security it/ot architect Jobs in Doha

cyber security it/ot architect

data center technician, engineering field services Jobs in Doha

data center technician, engineering field services

technology services controller cyber security incident response

Qatar Airways

<div><div><div><div><div><div><div><div>Job title
</div><div>Technology Services Controller (Cyber Security Incident Response)
</div></div><div><div>Ref #
</div><div>250000LL
</div></div><div><div>Location
</div><div>Qatar - Doha
</div></div><div><div>Job family
</div><div>Corporate &amp; Commercial
</div></div><div><div><ul><li>Closing date: 02-Nov-2025</li></ul><br>
</div></div></div></div></div><div><div><div><div><div><p><b>About Role</b></p><p>
You would be part of the Cyber Security Incident Response team with an operational role to quickly identify, respond to cyber incidents to our global infrastructure. This is a hands-on technical cyber security role with expertise in Security incident response and in the areas of endpoint security, application security, network security or Cloud security.</p><p><b>
Role and Responsibilities:</b></p><ul><li>
Lead or assist in investigations during active incidents, including those surfaced by Microsoft Sentinel and Defender XDR alerts.</li><li>
Use Microsoft Defender XDR to correlate alerts across Defender for Endpoint, Identity, Cloud Apps, and Office 365, enabling unified incident response.</li><li>
Perform proactive threat hunting using Microsoft Sentinel&rsquo;s KQL queries, livestream, and notebooks. Develop hypotheses and use API libraries for advanced hunting scenarios.</li><li>
Design and deploy SOAR playbooks in Microsoft Sentinel to automate incident response actions. These include alert triage, entity enrichment, and containment workflow.</li><li>
Coordinate with MSSP and CST teams for continuous use-case testing and purple team exercises.</li><li>
Assist and/or lead investigations in active security incident scenarios, supporting the organization through the Incident Response lifecycle.</li><li>
Must also be able to participate in rotating on call schedule and must be able to work collaboratively. Having the ability to work outside of normal working hours as required due to critical incidents or emergency calls, will be essential to success in this role.</li><li>
Routinely prepare written technical documentation and reports of findings, along with recommendations, that result from cases involving forensic analysis and incident response.</li><li>
Develop and update operational playbook for various cyber incident scenarios including Data breach, ransomware, supply chain compromise etc.,</li><li>
Analyze various log, network, malware, forensic, and cyber threat intel to validate security threats, recommend appropriate countermeasures, and assess impact of cyber incidents.</li><li>
Assist the Cyber Security manager in the analysis of security breaches to identify the root cause and to implement preventive measures.</li></ul>
</div></div></div></div></div><div><div><div><h3 class="jobSectionHeader"><b>Qualifications
</b></h3></div></div><div><div><div><div><p><b>About You</b></p><ul><li>
Bachelor Degree holder with minimum 5-7 years of relevant experience.</li><li>
3+ years' experience with Incident Response, Forensics, and/or Malware Analysis.</li><li>
Have at least one of the relevant certifications: SANS GIAC: GCIA, GCFA, GCFE, GREM, GXPN, GMON, or GCIH, ISC2: CCFP, CCSP, CISSP CERT CSIH, EC Council: CHFI or ECSA;</li><li>
MITRE Adversary Tactics, Techniques and Common Knowledge (ATT&amp;CK).</li><li>
Possess knowledge on log management, logs generated by various applications or appliances of IT infrastructure for SIEM event correlation.</li><li>
Experience with investigating using a wide variety of detective technologies SOAR, packet capture analysis, and host forensics and memory analysis tools.</li><li>
Expert knowledge on Defender for Endpoint and Servers for effective incident response actions.</li></ul><br>
</div></div><div></div><div><div><br>
<div><b>About Qatar Airways Group
</b></div><br>
Our story started with four aircraft. Today, we deliver excellence across 12 different businesses coming together as one. We&rsquo;ve grown fast, broken records and set trends that others follow. We don&rsquo;t slow down by the fear of failure. Instead, we dare to achieve what&rsquo;s never been done before.<br>
<br>
So whether you&rsquo;re creating a unique experience for our customers or innovating behind the scenes, every person contributes to our proud story. A story of spectacular growth and determination. Now is the time to bring your best ideas and passion to a place where your ambition will know no boundaries, and be part of a truly global community.<br>
</div></div><div><div>https://aa115.taleo.net/careersection/QA_External_CS/jobapply.ftl?lang=en&amp;job=250000LL</div></div></div></div></div></div></div></div>

Technology Services Controller (Cyber Security Incident Response)

Hamad International Airport

<div>
 <p>
  <strong>
   <u>
    About Role
   </u>
  </strong>
 </p>
 <p>
  You would be part of the Cyber Security Incident Response team with an operational role to quickly identify, respond to cyber incidents to our global infrastructure. This is a hands-on technical cyber security role with expertise in Security incident response and in the areas of endpoint security, application security, network security or Cloud security.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    <br/>
    Role and Responsibilities
   </u>
  </strong>
 </p>
 <ul>
  <li>
   :Assist and/or lead investigations in active security incident scenarios, supporting the organization through the Incident Response lifecycl
  </li>
  <li>
   eProvide expertise in the triage, escalate and respond to potential security events &amp; incidents and provides support to security team
  </li>
  <li>
   sMust also be able to participate in rotating on call schedule and must be able to work collaboratively. Having the ability to work outside of normal working hours as required due to critical incidents or emergency calls, will be essential to success in this role
  </li>
  <li>
   .Proactively hunting threats in the environment, identifying new risk, and developing methods to proactively address threats
  </li>
  <li>
   .Provide cyber&ndash;Incident Response expertise and perform Malware Analysis &amp; reverse engineering of malware
  </li>
  <li>
   .Perform forensic analysis in response to cyber-attacks and computer security breaches on systems and networks to identify the extent and nature of the compromise and provide recommendations on containment, eradication, and remediation steps
  </li>
  <li>
   .Routinely prepare written technical documentation and reports of findings, along with recommendations, that result from cases involving forensic analysis and incident response
  </li>
  <li>
   .Develop and update operational playbook for various cyber incident scenarios including Data breach, ransomware, supply chain compromise etc.
  </li>
  <li>
   ,Responsible for identification, analysis, and correlation of events of interest, escalation and continued monitoring of cybersecurity events on an enterprise-wide basis
  </li>
  <li>
   .Analyze various log, network, malware, forensic, and cyber threat intel to validate security threats, recommend appropriate countermeasures, and assess impact of cyber incidents
  </li>
  <li>
   .Assist the Cyber Security manager in the analysis of security breaches to identify the root cause and to implement preventive measures
  </li>
 </ul>
 <p>
  <br/>
 </p>
 .
</div>


i4 Solutions

<div>
 Date: Oct 2, 2025
 <br/>
 <br/>
 Location:
 <br/>
 <br/>
 Doha, QA
 <br/>
 <br/>
 Company: i4 Solutions W.L.L
 <br/>
 <br/>
 Req ID: 2273
 <br/>
 <br/>
 <strong>
  Job Title
  <br/>
  <br/>
 </strong>
 SOC Analyst
 <br/>
 <br/>
 <strong>
  Job Scope
  <br/>
  <br/>
 </strong>
 The SOC analyst will monitor and fight threats on behalf of our client's IT infrastructure, and to assess security systems and measures for weaknesses and possible improvements. The SOC analyst is responsible for ensuring the protection of digital assets from unauthorized access, both online (cloud) and on premise for our client's networks against cybersecurity threats such as hackers, Cyber-terrorists and malware that can steal or corrupt sensitive customer data.
 <br/>
 <br/>
 <strong>
  Main Duties And Responsibilities
  <br/>
  <br/>
 </strong>
 Technical and Operations
 <br/>
 <br/>
 <ul>
  <li>
   Identify, secure, and weed out the threats as front-line defense personnel
  </li>
  <li>
   Monitor, manage, and configure security tools, review incidents to assess their urgency, and escalate incidents if necessary
  </li>
  <li>
   Operate as an incident responder (Tier 2), remediating serious attacks, assessing the scope of the attack and affected systems, and collecting data for further analysis
  </li>
  <li>
   Analyze a breach within our client's environment to reach the root cause and remediation steps to limit risk
  </li>
  <li>
   Generate security reports for our clients, that serve as an input to evaluate the efficacy of the security policies
  </li>
  <li>
   Advise on what our clients should implement as part of the necessary changes required to counter the attack or improvise security standards
  </li>
  <li>
   Act as first line of defense as part of our managed security services for our clients to document incidents and contribute to incident response and disaster recovery plans if required
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 Talent Development
 <br/>
 <br/>
 <ul>
  <li>
   Lead and coach the team cultivating empowerment and ownership
  </li>
  <li>
   Develop capabilities and secure a solid succession plan
  </li>
  <li>
   Conduct regular performance reviews, identify training needs and oversee development plans
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Position Requirements
  <br/>
  <br/>
 </strong>
 <strong>
  Education
  <br/>
  <br/>
 </strong>
 Bachelor&rsquo;s degree in Information Technology, Computer Science or any other related field
 <br/>
 <br/>
 <strong>
  Experience
  <br/>
  <br/>
 </strong>
 At least 3 years in a Security Operations Center (SOC) related to MSS environment
 <br/>
 <br/>
</div>


SOC Analyst

QatarEnergy

<div>
 <strong>
  Primary Purpose Of The Job
  <br/>
  <br/>
 </strong>
 Responsible for leading the Offensive red teaming activities on QatarEnergy&rsquo;s IT/OT environments, by conducting threat hunting, penetration testing, Vulnerability scanning and security assurance activities. Provides oversight and technology guidance as well as managerial support as required. Oversee the execution of incident management program and supervises and coordinates engineers and external consultants to design, build and manage QatarEnergy SOC Red team functions on QatarEnergy&rsquo;s IT and OT cyber security mission critical operational expansion.
 <br/>
 <br/>
 <strong>
  Required Experience And Skills
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Strong understanding of cyber incident management, malware management and vulnerability management processes.
  </li>
  <li>
   Solid knowledge on Malware analysis, Vulnerability assessment &amp; Forensic &amp; memory analysis, and data analytics
  </li>
  <li>
   Experience with large ICS &amp; ICT environments in the Energy sector is a big plus.
  </li>
  <li>
   Advanced knowledge of networking fundamentals (TCP/IP, network layers, Ethernet, etc) Advanced knowledge of current threat landscape (threat actors, APT, cyber-crime, etc) Advanced knowledge of penetration techniques and forensic techniques. Protocol analysis knowledge and experience (Wireshark, Netwitness, etc.) Solid knowledge of client-server applications, multi-tier web applications, relational databases.
  </li>
  <li>
   Solid knowledge and experience with Cloud technologies (Amazon, Azure, Google Cloud, IaaS, SaaS etc.)
  </li>
  <li>
   Good knowledge of IT including multiple operating systems and system administration skills (Windows, Unix)
  </li>
  <li>
   Solid understanding of IT governance and processes, such as ITIL, COBIT.
  </li>
  <li>
   Possession of Industry Certifications ISACA, GCIA, SANS, ICS2, EC-Council, other relevant cyber security certifications. (such as CISSP, CISM, (GCIH), (GIAC), (CEH), (CEPT), OSCE, CHFI, GREM or equivalent security technologies technical certification (Advanced Level)
  </li>
  <li>
   Must maintain professional demeanor in stressful situations.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Educational Qualifications
  <br/>
  <br/>
 </strong>
 Bachelor&rsquo;s degree in information security, computer science, or systems engineering. 10+ years of technical experience in Information Security, System Administration, or Network Engineering with at least 5 years of experience in Information Security.
</div>


PENETRATION TEST ANALYST

<div></div><div><p><b>Job Posting Date: </b>15 Oct 2025
</p><p><b>Work Location:</b> Doha, QA
</p><p><b>Company: </b>QatarEnergy LNG
</p><div><div><div><div><h2 class="jobSectionHeader"><b>Job Specification</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Job Purpose</b></h2>
</div><div><p>
Safeguarding the organization&rsquo;s IT and OT environments by detecting, investigating, and proactively hunting for cyber threats. The role bridges intelligence and operations, turning threat data into actionable detections and hunt activities. Working closely with SOC Team, the specialist enhances detection capabilities and strengthens the organization&rsquo;s overall cyber resilience.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Job Context &amp; Major Challenge(s)
</b></h2></div><div><p>Major challenges are,</p>
<p>
(1)Keeping pace with evolving threat landscape as attackers develop new techniques and strategies.</p>
<p>
(2)Thorough understanding of security operations centre (SOC) 24x7</p>
<p>
(3) supporting the Information Risk Management Division Manager in dealing with an increased cybersecurity risk due to the geopolitical situation</p>
<p>
(4) Contributing to the ongoing continuous improvement of SOC due to the current maturity level and the changing threat level</p>
<p>
(5) Keeping up to date with IT and OT cyber threats to stay ahead of such threats.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Key Job Accountabilities - I</b></h2>
</div><div><ul><li>Perform proactive threat hunting across IT and OT networks using intelligence from the Threat Analyst to uncover stealthy or undetected threats.</li>
<li>Analyse and correlate security incidents to understand attacker behaviour, techniques, and campaign patterns beyond simple alerts.</li>
<li>Bridge threat intelligence with detection logic, translating new IOCs, TTPs, and adversary trends into actionable detection content for the SOC Engineer to implement.</li>
<li>Conduct deep-dive investigations on high-severity alerts, ensuring accurate root cause determination and actionable recommendations.</li>
<li>Support incident response teams during containment and eradication phases by providing context on attacker tools, tactics, and infrastructure.</li>
<li>Collaborate with the SOC Engineer to refine SIEM use cases, detection rules, and SOAR playbooks based on threat hunting outcomes.</li>
<li>Perform malware reverse engineering and behavioural analysis, extracting IOCs, YARA rules and technical findings to feed into threat hunting and detection development.</li>
<li>Develop and maintain threat profiles for key adversaries and attack scenarios targeting both IT and OT environments.</li>
<li>Prepare technical briefings reports summarizing threat findings and lessons learned for management.</li>
<li>Continuously improve analytical techniques, staying current with emerging threats, tools, and frameworks like MITRE ATT&amp;CK.</li>
<li>Ensure alignment with legal and ethical guidelines to ensure team activities are authorized and do not compromise company&rsquo;s integrity or reputation.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Person Specification - Minimum Requirement</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Qualifications</b></h2>
</div><div><ul><li>Bachelor degree level in information security, computer science or engineering.</li>
<li>Holds a relevant professional certification such as (e.g., GCTI, GCIA, GCIH, GREM).</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Knowledge and/or Experience
</b></h2></div><div><ul><li>10 years Information Security experience in a similar position.</li>
<li>Proven experience in cyber threat analysis, hunting, and incident investigation across both IT and OT environments.</li>
<li>Strong understanding of network protocols, malware behaviour, and adversary TTPs aligned with the MITRE ATT&amp;CK framework.</li>
<li>Experience with SIEM/SOAR platforms, threat intelligence tools, and log analysis for advanced threat detection.</li>
<li>Strong analytical and investigative skills with hands-on experience in threat hunting.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Technical and Business Skills</b></h2>
</div><div><ul><li>Ability to assess and evaluate risk and the impact of legislation and actively promotes compliance.</li>
<li>Possesses a good understanding of IT and OT business applications.</li></ul></div></div></div></div></div><p></p>

Cyber Threat Specialist

COZMALABS

<p><b>Responsibilities:</b></p><ul><li>Implement real-time oversight of security systems, including firewalls, IDS/IPS, EDR, XDR, WAF, SIEM, and email gateways, to promptly detect and mitigate threats in both on-premises and cloud environments.</li><li>Conduct regular vulnerability scans and risk assessments to identify security gaps, ensuring timely remediation in both on-premises and cloud environments and enhancement of the security framework.</li><li>Establish and execute a comprehensive incident response plan for security breaches, encompassing investigation, containment, recovery, and post-incident analysis using SIEM and EDR/XDR tools.</li><li>Formulate and enforce security policies aligned with industry standards (e.g., ISO 27001, NIST, QCERT and NIA) to ensure compliance and enhance overall security.</li><li>Implement ongoing security training and awareness programs to educate employees on best practices and emerging threats, fostering a security-conscious culture.</li><li>Establish robust access controls to limit data exposure based on user roles, ensuring only authorized personnel can access sensitive information.</li><li>Integrate threat intelligence feeds to stay updated on emerging threats and vulnerabilities, enhancing proactive defense measures.</li><li>Conduct periodic security audits and penetration testing to evaluate the effectiveness of security measures and identify areas for improvement.</li><li>Prepare and submit regular compliance reports to management, highlighting adherence to security policies, incident responses, and ongoing security initiatives.</li></ul><p><b>Qualifications:</b></p><ul><li>3-5+ years of experience in the following:</li><li>Network and System Security devices and tools.</li><li>Infrastructure Services Governance.</li><li>Vulnerability scanning and assessments.</li><li>Security incident response management.</li><li>Enforcing industry security policy standards and frameworks.</li><li>Configuring and integrating threat intelligence feeds.</li><li>Writing security reports, policies, and procedures.</li><li>Conducting penetration testing and audits.</li></ul><p>Job Type: Full-time</p>

Information Security Specialist

Capital Security Systems

<p>Key Responsibilities</p><ul><li>Design &amp; Architecture</li></ul><p>o Develop and maintain secure architecture for network, systems, cloud (IaaS, PaaS, SaaS), and hybrid environments.</p><p>o Integrate security into system &amp; application design (secure-by-design / DevSecOps).</p><p>o Lead security reviews for new initiatives / infrastructure / software.</p><ul><li>Security Operations &amp; Infrastructure Management</li></ul><p>o Configure, deploy, and maintain security tools: firewalls, IDS/IPS, VPNs, NAC, Web Proxies, Endpoint Detection &amp; Response (EDR).</p><p>o Oversee security infrastructure and platforms: SIEM, log management, threat detection &amp; monitoring.</p><p>o Manage patching, vulnerability scanning / management, configuration hardening.</p><ul><li>Incident Response &amp; Threat Management</li></ul><p>o Lead investigations following security incidents, coordinate response, forensics, remediation &amp; lessons learned.</p><p>o Conduct threat modelling and threat hunting.</p><p>o Develop and maintain incident response playbooks and plans.</p><ul><li>Governance, Risk &amp; Compliance (GRC)</li></ul><p>o Implement security governance framework (policies, standards, SOPs).</p><p>o Ensure compliance with local, regional, and international regulatory requirements (e.g. NESA, CITC, Data Protection laws, ISO 27001, GDPR if applicable).</p><p>o Perform risk assessments, third-party vendor risk evaluations.</p><ul><li>Cloud Security &amp; Emerging Technologies</li></ul><p>o Secure cloud services (AWS, Azure, GCP) &amp; cloud migration projects.</p><p>o Use Infrastructure as Code (IaC) tools (Terraform, AWS CloudFormation, ARM, etc.).</p><p>o Oversee container security (Kubernetes, Docker), microservices, serverless functions.</p><ul><li>Penetration Testing &amp; Red Teaming</li></ul><p>o Plan and execute penetration tests / red teaming engagements.</p><p>o Assess application, network, infrastructure, and external facing systems.</p><ul><li>Mentoring &amp; Leadership</li></ul><p>o Mentor junior security engineers / analysts.</p><p>o Lead or coordinate cross-functional security projects.</p><p>o Engage with stakeholders (IT, Ops, DevOps, C&#8208;level) to raise awareness and ensure security is built in.</p><ul><li>Continuous Improvement &amp; Research</li></ul><p>o Monitor threat landscape and evolving vulnerabilities.</p><p>o Propose improvements, new tools, or security technologies.</p><p>o Keep up&#8208;to&#8208;date with innovations, cryptography, zero trust, identity&#8208;access trends.</p><p>Experience &amp; Seniority</p><ul><li>Typically 5-8+ years of total experience in cybersecurity, with at least 2-3 years in a senior / leadership / project&#8208;lead role.</li><li>Strong track record of implementing complex security solutions and responding to incidents.</li><li>Experience in the GCC or in environments with similar regulatory / cultural / infrastructural constraints is a strong plus.</li><li>Exposure to regulated industries (banking &amp; finance, oil &amp; gas, energy, healthcare, government) is highly valued.</li></ul><p>Qualifications &amp; Certifications</p><ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, Cybersecurity, or related field</li><li>Master&rsquo;s degree is a plus but not mandatory (especially with significant experience)</li><li>Required Certifications (or equivalent):</li></ul><p>o CISSP (Certified Information Systems Security Professional)</p><p>o CISM / CISA</p><p>o Certifications in vendor&#8208;specific firewall, network, or security tools (e.g. Palo Alto, Fortinet, CheckPoint, Cisco Security)</p><ul><li>Desirable / Bonus Certifications:</li></ul><p>o CEH (Certified Ethical Hacker)</p><p>o OSCP (Offensive Security Certified Professional)</p><p>o CCNP Security / CCIE Security</p><p>o Cloud security certifications (e.g. AWS Certified Security Specialty, Azure Security Engineer, GCP Security)</p><p>o Certified Cloud Security Professional (CCSP)</p><p>o Certifications in forensics / threat intelligence</p><p>GCC-Specific Requirements</p><ul><li>Knowledge/experience with local laws &amp; regulations: Data protection &amp; privacy laws in respective GCC countries, national cybersecurity strategies, regulatory authorities (e.g. UAE&rsquo;s NESA; Saudi Arabia&rsquo;s SAMA / NCA; Qatar's MoCI &amp; relevant regulations; CITC in Saudi; etc.).</li><li>Multilingual communication often helpful: English is primary for business; Arabic language skills are often a plus (especially for certain public sector or government agencies).</li><li>Experience or familiarity with Smart Cities, Critical Infrastructure / Energy, Oil &amp; Gas sectors &ndash; because many GCC projects involve nationally strategic infrastructure.</li><li>Knowledge of OT/ICS security (Operational Technology / Industrial Control Systems), especially in energy, utilities, petrochemical industries.</li></ul><p>Job Type: Full-time</p>

CYBER SECURITY

Explore 1222+ Technology services controller cyber security incident response in Doha this October. Find roles across top companies and apply now to boost your career.

1222 technology services controller cyber security incident response jobs IN Doha

Technology Services Controller (Cyber Security Incident Response)

Technology Services Controller (Cyber Security Incident Response)

SOC Analyst

PENETRATION TEST ANALYST

Cyber Threat Specialist

Information Security Specialist

CYBER SECURITY