cyber security it/ot architect Jobs in Qatar Moph License Jobs In Qatar Moph License Jobs In Qatar Moph License Jobs In Qatar Moph License Jobs In Doha Qatar

cyber security it/ot architect

cyber threat specialist Jobs in Qatar Moph License Jobs In Qatar Moph License Jobs In Qatar Moph License Jobs In Qatar Moph License Jobs In Doha Qatar

cyber threat specialist

information security specialist Jobs in Qatar Moph License Jobs In Qatar Moph License Jobs In Qatar Moph License Jobs In Qatar Moph License Jobs In Doha Qatar

information security specialist

it manager Jobs in Qatar Moph License Jobs In Qatar Moph License Jobs In Qatar Moph License Jobs In Qatar Moph License Jobs In Doha Qatar

it manager

its systems manager Jobs in Qatar Moph License Jobs In Qatar Moph License Jobs In Qatar Moph License Jobs In Qatar Moph License Jobs In Doha Qatar

its systems manager

technology services controller cyber security incident response

Qatar Airways

<div><div><div><div><div><div><div><div>Job title
</div><div>Technology Services Controller (Cyber Security Incident Response)
</div></div><div><div>Ref #
</div><div>250000LL
</div></div><div><div>Location
</div><div>Qatar - Doha
</div></div><div><div>Job family
</div><div>Corporate &amp; Commercial
</div></div><div><div><ul><li>Closing date: 02-Nov-2025</li></ul><br>
</div></div></div></div></div><div><div><div><div><div><p><b>About Role</b></p><p>
You would be part of the Cyber Security Incident Response team with an operational role to quickly identify, respond to cyber incidents to our global infrastructure. This is a hands-on technical cyber security role with expertise in Security incident response and in the areas of endpoint security, application security, network security or Cloud security.</p><p><b>
Role and Responsibilities:</b></p><ul><li>
Lead or assist in investigations during active incidents, including those surfaced by Microsoft Sentinel and Defender XDR alerts.</li><li>
Use Microsoft Defender XDR to correlate alerts across Defender for Endpoint, Identity, Cloud Apps, and Office 365, enabling unified incident response.</li><li>
Perform proactive threat hunting using Microsoft Sentinel&rsquo;s KQL queries, livestream, and notebooks. Develop hypotheses and use API libraries for advanced hunting scenarios.</li><li>
Design and deploy SOAR playbooks in Microsoft Sentinel to automate incident response actions. These include alert triage, entity enrichment, and containment workflow.</li><li>
Coordinate with MSSP and CST teams for continuous use-case testing and purple team exercises.</li><li>
Assist and/or lead investigations in active security incident scenarios, supporting the organization through the Incident Response lifecycle.</li><li>
Must also be able to participate in rotating on call schedule and must be able to work collaboratively. Having the ability to work outside of normal working hours as required due to critical incidents or emergency calls, will be essential to success in this role.</li><li>
Routinely prepare written technical documentation and reports of findings, along with recommendations, that result from cases involving forensic analysis and incident response.</li><li>
Develop and update operational playbook for various cyber incident scenarios including Data breach, ransomware, supply chain compromise etc.,</li><li>
Analyze various log, network, malware, forensic, and cyber threat intel to validate security threats, recommend appropriate countermeasures, and assess impact of cyber incidents.</li><li>
Assist the Cyber Security manager in the analysis of security breaches to identify the root cause and to implement preventive measures.</li></ul>
</div></div></div></div></div><div><div><div><h3 class="jobSectionHeader"><b>Qualifications
</b></h3></div></div><div><div><div><div><p><b>About You</b></p><ul><li>
Bachelor Degree holder with minimum 5-7 years of relevant experience.</li><li>
3+ years' experience with Incident Response, Forensics, and/or Malware Analysis.</li><li>
Have at least one of the relevant certifications: SANS GIAC: GCIA, GCFA, GCFE, GREM, GXPN, GMON, or GCIH, ISC2: CCFP, CCSP, CISSP CERT CSIH, EC Council: CHFI or ECSA;</li><li>
MITRE Adversary Tactics, Techniques and Common Knowledge (ATT&amp;CK).</li><li>
Possess knowledge on log management, logs generated by various applications or appliances of IT infrastructure for SIEM event correlation.</li><li>
Experience with investigating using a wide variety of detective technologies SOAR, packet capture analysis, and host forensics and memory analysis tools.</li><li>
Expert knowledge on Defender for Endpoint and Servers for effective incident response actions.</li></ul><br>
</div></div><div></div><div><div><br>
<div><b>About Qatar Airways Group
</b></div><br>
Our story started with four aircraft. Today, we deliver excellence across 12 different businesses coming together as one. We&rsquo;ve grown fast, broken records and set trends that others follow. We don&rsquo;t slow down by the fear of failure. Instead, we dare to achieve what&rsquo;s never been done before.<br>
<br>
So whether you&rsquo;re creating a unique experience for our customers or innovating behind the scenes, every person contributes to our proud story. A story of spectacular growth and determination. Now is the time to bring your best ideas and passion to a place where your ambition will know no boundaries, and be part of a truly global community.<br>
</div></div><div><div>https://aa115.taleo.net/careersection/QA_External_CS/jobapply.ftl?lang=en&amp;job=250000LL</div></div></div></div></div></div></div></div>

Technology Services Controller (Cyber Security Incident Response)

QatarEnergy LNG

<div>
 Job description:
 <br/>
 <br/>
 <strong>
  Job Specification
 </strong>
 Job Purpose
 <p>
  Safeguarding the organization&rsquo;s IT and OT environments by detecting, investigating, and proactively hunting for cyber threats. The role bridges intelligence and operations, turning threat data into actionable detections and hunt activities. Working closely with SOC Team, the specialist enhances detection capabilities and strengthens the organization&rsquo;s overall cyber resilience.
 </p>
 Job Context &amp; Major Challenge(s)
 <p>
  Major challenges are,
 </p>
 <p>
  (1)Keeping pace with evolving threat landscape as attackers develop new techniques and strategies.
 </p>
 <p>
  (2)Thorough understanding of security operations centre (SOC) 24x7
 </p>
 <p>
  (3) supporting the Information Risk Management Division Manager in dealing with an increased cybersecurity risk due to the geopolitical situation
 </p>
 <p>
  (4) Contributing to the ongoing continuous improvement of SOC due to the current maturity level and the changing threat level
 </p>
 <p>
  (5) Keeping up to date with IT and OT cyber threats to stay ahead of such threats.
 </p>
 Key Job Accountabilities - I
 <ul>
  <li>
   Perform proactive threat hunting across IT and OT networks using intelligence from the Threat Analyst to uncover stealthy or undetected threats.
  </li>
  <li>
   Analyse and correlate security incidents to understand attacker behaviour, techniques, and campaign patterns beyond simple alerts.
  </li>
  <li>
   Bridge threat intelligence with detection logic, translating new IOCs, TTPs, and adversary trends into actionable detection content for the SOC Engineer to implement.
  </li>
  <li>
   Conduct deep-dive investigations on high-severity alerts, ensuring accurate root cause determination and actionable recommendations.
  </li>
  <li>
   Support incident response teams during containment and eradication phases by providing context on attacker tools, tactics, and infrastructure.
  </li>
  <li>
   Collaborate with the SOC Engineer to refine SIEM use cases, detection rules, and SOAR playbooks based on threat hunting outcomes.
  </li>
  <li>
   Perform malware reverse engineering and behavioural analysis, extracting IOCs, YARA rules and technical findings to feed into threat hunting and detection development.
  </li>
  <li>
   Develop and maintain threat profiles for key adversaries and attack scenarios targeting both IT and OT environments.
  </li>
  <li>
   Prepare technical briefings reports summarizing threat findings and lessons learned for management.
  </li>
  <li>
   Continuously improve analytical techniques, staying current with emerging threats, tools, and frameworks like MITRE ATT&amp;CK.
  </li>
  <li>
   Ensure alignment with legal and ethical guidelines to ensure team activities are authorized and do not compromise company&rsquo;s integrity or reputation.
  </li>
 </ul>
 <strong>
  Person Specification - Minimum Requirement
 </strong>
 Qualifications
 <ul>
  <li>
   Bachelor degree level in information security, computer science or engineering.
  </li>
  <li>
   Holds a relevant professional certification such as (e.g., GCTI, GCIA, GCIH, GREM).
  </li>
 </ul>
 Knowledge and/or Experience
 <ul>
  <li>
   10 years Information Security experience in a similar position.
  </li>
  <li>
   Proven experience in cyber threat analysis, hunting, and incident investigation across both IT and OT environments.
  </li>
  <li>
   Strong understanding of network protocols, malware behaviour, and adversary TTPs aligned with the MITRE ATT&amp;CK framework.
  </li>
  <li>
   Experience with SIEM/SOAR platforms, threat intelligence tools, and log analysis for advanced threat detection.
  </li>
  <li>
   Strong analytical and investigative skills with hands-on experience in threat hunting.
  </li>
 </ul>
 Technical and Business Skills
 <ul>
  <li>
   Ability to assess and evaluate risk and the impact of legislation and actively promotes compliance.
  </li>
  <li>
   Possesses a good understanding of IT and OT business applications.
  </li>
 </ul>
</div>


Cyber Threat Specialist

QatarEnergy

<div></div><div><p><b>Job Posting Date: </b>15 Oct 2025
</p><p><b>Work Location:</b> Doha, QA
</p><p><b>Company: </b>QatarEnergy LNG
</p><div><div><div><div><h2 class="jobSectionHeader"><b>Job Specification</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Job Purpose</b></h2>
</div><div><p>
Safeguarding the organization&rsquo;s IT and OT environments by detecting, investigating, and proactively hunting for cyber threats. The role bridges intelligence and operations, turning threat data into actionable detections and hunt activities. Working closely with SOC Team, the specialist enhances detection capabilities and strengthens the organization&rsquo;s overall cyber resilience.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Job Context &amp; Major Challenge(s)
</b></h2></div><div><p>Major challenges are,</p>
<p>
(1)Keeping pace with evolving threat landscape as attackers develop new techniques and strategies.</p>
<p>
(2)Thorough understanding of security operations centre (SOC) 24x7</p>
<p>
(3) supporting the Information Risk Management Division Manager in dealing with an increased cybersecurity risk due to the geopolitical situation</p>
<p>
(4) Contributing to the ongoing continuous improvement of SOC due to the current maturity level and the changing threat level</p>
<p>
(5) Keeping up to date with IT and OT cyber threats to stay ahead of such threats.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Key Job Accountabilities - I</b></h2>
</div><div><ul><li>Perform proactive threat hunting across IT and OT networks using intelligence from the Threat Analyst to uncover stealthy or undetected threats.</li>
<li>Analyse and correlate security incidents to understand attacker behaviour, techniques, and campaign patterns beyond simple alerts.</li>
<li>Bridge threat intelligence with detection logic, translating new IOCs, TTPs, and adversary trends into actionable detection content for the SOC Engineer to implement.</li>
<li>Conduct deep-dive investigations on high-severity alerts, ensuring accurate root cause determination and actionable recommendations.</li>
<li>Support incident response teams during containment and eradication phases by providing context on attacker tools, tactics, and infrastructure.</li>
<li>Collaborate with the SOC Engineer to refine SIEM use cases, detection rules, and SOAR playbooks based on threat hunting outcomes.</li>
<li>Perform malware reverse engineering and behavioural analysis, extracting IOCs, YARA rules and technical findings to feed into threat hunting and detection development.</li>
<li>Develop and maintain threat profiles for key adversaries and attack scenarios targeting both IT and OT environments.</li>
<li>Prepare technical briefings reports summarizing threat findings and lessons learned for management.</li>
<li>Continuously improve analytical techniques, staying current with emerging threats, tools, and frameworks like MITRE ATT&amp;CK.</li>
<li>Ensure alignment with legal and ethical guidelines to ensure team activities are authorized and do not compromise company&rsquo;s integrity or reputation.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Person Specification - Minimum Requirement</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Qualifications</b></h2>
</div><div><ul><li>Bachelor degree level in information security, computer science or engineering.</li>
<li>Holds a relevant professional certification such as (e.g., GCTI, GCIA, GCIH, GREM).</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Knowledge and/or Experience
</b></h2></div><div><ul><li>10 years Information Security experience in a similar position.</li>
<li>Proven experience in cyber threat analysis, hunting, and incident investigation across both IT and OT environments.</li>
<li>Strong understanding of network protocols, malware behaviour, and adversary TTPs aligned with the MITRE ATT&amp;CK framework.</li>
<li>Experience with SIEM/SOAR platforms, threat intelligence tools, and log analysis for advanced threat detection.</li>
<li>Strong analytical and investigative skills with hands-on experience in threat hunting.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Technical and Business Skills</b></h2>
</div><div><ul><li>Ability to assess and evaluate risk and the impact of legislation and actively promotes compliance.</li>
<li>Possesses a good understanding of IT and OT business applications.</li></ul></div></div></div></div></div><p></p>

COZMALABS

<p><b>Responsibilities:</b></p><ul><li>Implement real-time oversight of security systems, including firewalls, IDS/IPS, EDR, XDR, WAF, SIEM, and email gateways, to promptly detect and mitigate threats in both on-premises and cloud environments.</li><li>Conduct regular vulnerability scans and risk assessments to identify security gaps, ensuring timely remediation in both on-premises and cloud environments and enhancement of the security framework.</li><li>Establish and execute a comprehensive incident response plan for security breaches, encompassing investigation, containment, recovery, and post-incident analysis using SIEM and EDR/XDR tools.</li><li>Formulate and enforce security policies aligned with industry standards (e.g., ISO 27001, NIST, QCERT and NIA) to ensure compliance and enhance overall security.</li><li>Implement ongoing security training and awareness programs to educate employees on best practices and emerging threats, fostering a security-conscious culture.</li><li>Establish robust access controls to limit data exposure based on user roles, ensuring only authorized personnel can access sensitive information.</li><li>Integrate threat intelligence feeds to stay updated on emerging threats and vulnerabilities, enhancing proactive defense measures.</li><li>Conduct periodic security audits and penetration testing to evaluate the effectiveness of security measures and identify areas for improvement.</li><li>Prepare and submit regular compliance reports to management, highlighting adherence to security policies, incident responses, and ongoing security initiatives.</li></ul><p><b>Qualifications:</b></p><ul><li>3-5+ years of experience in the following:</li><li>Network and System Security devices and tools.</li><li>Infrastructure Services Governance.</li><li>Vulnerability scanning and assessments.</li><li>Security incident response management.</li><li>Enforcing industry security policy standards and frameworks.</li><li>Configuring and integrating threat intelligence feeds.</li><li>Writing security reports, policies, and procedures.</li><li>Conducting penetration testing and audits.</li></ul><p>Job Type: Full-time</p>

Information Security Specialist

Prime Care Qatar

<p><b>Position Overview:</b> The Chief Information Security Officer (CISO) is a senior executive responsible for establishing and maintaining the organization's vision, strategy, and program to ensure that information assets, technologies, and data are adequately protected. The CISO will lead efforts to identify, evaluate, and mitigate risks to the organization, implement robust security strategies, and oversee the continuous improvement of a secure enterprise environment. The CISO will also actively monitor and intervene whenever necessary to mitigate security problems that may arise, ensuring prompt and effective response to any security incidents.</p><p><b>Key Responsibilities:</b></p><p><b>Strategic Leadership:</b></p><ul><li>Develop, implement, and monitor a comprehensive enterprise information security and risk management program.</li><li>Align the security program with business objectives, ensuring compliance with industry regulations and standards.</li><li>Advocate for security awareness across the organization.</li></ul><p><b>Risk Management:</b></p><ul><li>Conduct regular risk assessments to identify potential threats and vulnerabilities.</li><li>Develop and maintain risk treatment plans to mitigate or eliminate risks to acceptable levels.</li><li>Oversee incident response planning and disaster recovery strategies.</li><li>Actively monitor the enterprise environment for security issues and intervene directly as needed to address emerging threats or incidents.</li></ul><p><b>Policy and Compliance:</b></p><ul><li>Establish and enforce security policies, procedures, and standards.</li><li>Ensure compliance with applicable laws, regulations, and industry frameworks (e.g., GDPR, ISO 27001, HIPAA, NIST).</li><li>Act as the primary point of contact for audits and security-related inquiries.</li></ul><p><b>Technology Oversight:</b></p><ul><li>Evaluate, acquire, and implement security solutions and technologies.</li><li>Ensure the secure design, architecture, and deployment of IT systems and applications.</li><li>Manage the organization's Security Operations Center (SOC), if applicable.</li></ul><p>In the absence of a dedicated security team, the CISO is expected to work hands-on to implement, manage, and monitor technical security controls, enforce access management policies, and directly respond to security incidents across systems and networks.</p><p><b>Collaboration and Communication:</b></p><ul><li>Work with stakeholders across departments to integrate security into business operations.</li><li>Provide regular reporting on security metrics, incidents, and progress to the executive team and board of directors.</li><li>Engage with external partners, vendors, and consultants for security solutions and best practices.</li></ul><p><b>Team Management:</b></p><ul><li>Build and lead a high-performing information security team.</li><li>Provide training, mentorship, and career development for security personnel.</li><li>Foster a culture of accountability and continuous improvement within the security team.</li></ul><p><b>Key Performance Indicators (KPIs):</b></p><ul><li>Reduction in security incidents and breaches.</li><li>Compliance with regulatory requirements and audits.</li><li>Implementation of security strategies within defined timelines.</li><li>Security awareness levels among employees.</li><li>Incident response and recovery times.</li></ul><p>Job Type: Full-time</p>

Chief Information Security Officer (CISO)

<div></div><div><p><b>Job Posting Date: </b>16 Oct 2025
</p><p><b>Work Location:</b> Doha, QA
</p><p><b>Company: </b>QatarEnergy LNG
</p><div><div><div><div><h2 class="jobSectionHeader"><b>Job Specification</b></h2>
</div><div><p>
Join our dedicated Cyber Assurance Team within the Information Risk Management Department. Reporting to the Cyber Assurance Lead, you will play a critical role in strengthening our organization's security posture.</p>
<p>
The Cyber Assurance team is responsible for proactively assessing and enhancing our security defenses. This involves conducting comprehensive ethical hacking activities and adversary simulations to identify potential vulnerabilities and control gaps. Your expertise will be vital in providing actionable recommendations to fortify our systems and ensure the resilience of our digital assets.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Job Purpose</b></h2>
</div><div><ul><li>Contribute to the implementation and continuous improvement of the organization's overall cyber strategy, ensuring the protection of information systems and data against cyber threats and vulnerabilities. Support the Cyber Assurance Lead in monitoring, enhancing, and maintaining the cyber assurance program within QatarEnergy LNG&rsquo;s Information Security organization.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Job Context &amp; Major Challenge(s)</b></h2>
</div><div><ul><li>Major challenges are,
<br>
(1) requires deep understanding of ethical hacking, penetration testing methodologies and offensive cybersecurity tactics
<br>
(2) supporting the Information Risk Management Division Manager in dealing with an increased cybersecurity risk due to the geopolitical situation
<br>
(3) contributing to the ongoing continuous improvement of SOC due to the current maturity level and the changing threat level
<br>
(4) keeping up to date with IT and OT Information Security and developments.
<br>
(5) keeping up to date with IT and OT Information Security regulatory requirements.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Key Job Accountabilities - I</b></h2>
</div><div><ul><li>Adversary emulation: Plan and execute full-scope red team engagements that mimic real-world threat actors, including initial access, privilege escalation, and lateral movement.</li>
<li>Phishing campaigns: Conduct advanced social engineering and targeted phishing campaigns that bypass modern email gateways.</li>
<li>Technical assessments: Perform thorough assessments of complex production environments, including network infrastructure, cloud services, and applications.</li>
<li>Malware development and EDR bypass: Develop custom malware, exploits, and post-exploitation tools designed to evade detection by Endpoint Detection and Response (EDR) and other security controls.</li>
<li>C2 infrastructure management: Deploy, manage, and operate command-and-control (C2) frameworks such as Cobalt Strike, Brute Ratel C4, and Nighthawk C2.</li>
<li>Operational security (OpSec): Maintain strict OpSec discipline to ensure all red team activities remain covert and undetected by defensive teams.</li>
<li>Research and development (R&amp;D): Conduct offensive security research to stay current with the latest tactics, techniques, and procedures (TTPs) and develop new tools and methodologies.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Key Job Accountabilities - II</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Person Specification - Minimum Requirement</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Qualifications</b></h2>
</div><div><ul><li>Bachelor&rsquo;s degree level in information security, computer science or engineering.</li>
<li>Professional certifications in information security management and standards (e.g., OSCP, OSCE, CRTP, CRTO, CRTL, etc.).</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Knowledge and/or Experience - I</b></h2>
</div><div><ul><li>8+ years of experience in <b>Offensive Security / Red Teaming</b></li>
<li>Broad knowledge of current techniques and practices associated with development and service provision and is a recognized specialist in at least one area.</li>
<li>Understands the main strategic and commercial issues facing IT and safety and availability expectations from OT and the Organization&rsquo;s management and a good understanding of the principles of management and control.</li>
<li>Possesses good understanding of and practices according to a professional code of conduct and code of ethics.</li>
<li>Possesses a good understanding of IT/OT business applications.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Technical and Business Skills - I</b></h2>
</div><div><ul><li>Ability to assess and evaluate risk and the impact of legislation, and actively promotes compliance.</li>
<li>Builds a good rapport and strategic relations with the OT OEM community and with the QatarEnergy LNG operation leads.</li>
<li>Ability to deal effectively with stakeholders at all levels.</li>
<li>Demonstrates integrity, objectivity and impartiality.</li>
<li>Analytical skills.</li>
<li>Applies pragmatic judgement in the application of rules.</li></ul></div></div></div></div></div><p></p>

Cyber Assurance Specialist

Al Adyat consultancy

<p>The <b>SIEM Administrator</b> is responsible for implementing, maintaining, and optimizing the Security Information and Event Management (SIEM) platform to ensure continuous monitoring, threat detection, and incident response across the organization&rsquo;s IT environment. This role involves managing SIEM configurations, integrating various log sources, developing correlation rules, and ensuring data integrity and performance. The SIEM Administrator works closely with SOC analysts, system administrators, and cybersecurity teams to enhance the organization&rsquo;s overall security posture.</p><p><b>Key Responsibilities:</b></p><ul><li><b>SIEM Platform Management:</b></li><li>Install, configure, and maintain SIEM tools (e.g., Splunk, IBM QRadar, ArcSight, Sentinel, LogRhythm).</li><li><b>3 years&rsquo; experience on Microsoft Sentinel and app logic.</b></li><li>Manage system health, performance tuning, and upgrades to ensure optimal operation.</li><li>Integrate diverse log sources from servers, firewalls, applications, cloud services, and endpoints.</li><li><b>Log Management and Correlation:</b></li><li>Define and implement log collection policies and normalization standards.</li><li>Develop and fine-tune correlation rules, alerts, and dashboards to detect potential threats and anomalies.</li><li>Validate and troubleshoot log ingestion issues to ensure complete visibility across systems.</li><li><b>Security Operations Support:</b></li><li>Collaborate with SOC teams to improve incident detection, analysis, and response processes.</li><li>Support incident investigations by providing detailed log analysis and event correlation.</li><li>Maintain incident response playbooks and automate repetitive detection tasks where possible.</li><li><b>Compliance and Reporting:</b></li><li>Ensure SIEM logging and monitoring align with compliance frameworks (ISO 27001, NIST, GDPR, etc.).</li><li>Generate regular reports and dashboards for management and audit purposes.</li><li>Document configurations, procedures, and change logs for audit readiness.</li><li><b>Continuous Improvement:</b></li><li>Research emerging threats and update SIEM detection content accordingly.</li><li>Evaluate and recommend enhancements to SIEM architecture and data sources.</li><li>Conduct periodic health checks and capacity planning for the SIEM environment.</li></ul><p><b>Qualifications and Skills:</b></p><ul><li><b>Education:</b></li><li>Bachelor&rsquo;s degree in computer science, Information Security, or a related field.</li><li>Master&rsquo;s degree or relevant certifications preferred.</li><li><b>Certifications (Preferred):</b></li><li>SIEM-specific certifications (e.g., Splunk Certified Administrator, QRadar Certified, Microsoft Sentinel).</li><li>Security certifications such as CompTIA Security+, CEH, CISSP, or GIAC.</li><li><b>Technical Skills:</b></li><li>Strong knowledge of log management, event correlation, and network protocols.</li><li>Hands-on experience with SIEM tools (Splunk, QRadar, ArcSight, Sentinel, etc.).</li><li>Familiarity with firewalls, IDS/IPS, endpoint protection, and threat intelligence platforms.</li><li>Scripting knowledge (Python, PowerShell, or Bash) for automation and integration.</li><li>Experience with cloud environments (AWS, Azure, GCP) and their native security logging tools.</li><li><b>Soft Skills:</b></li><li>Strong analytical and problem-solving abilities.</li><li>Excellent communication and documentation skills.</li><li>Ability to work under pressure in a fast-paced security operations environment.</li><li>Attention to detail and commitment to maintaining system integrity and confidentiality.</li></ul><p><b>Experience Required:</b></p><ul><li>3&ndash;5 years of experience in cybersecurity, with at least 2 years focusing on SIEM administration or engineering.</li></ul><p>Experience working in a SOC or enterprise security environment is highly desirable.</p><p>Job Type: Full-time</p><p>Pay: QAR14,000.00 - QAR16,000.00 per month</p><p>Education:</p><ul><li>Bachelor's (Required)</li></ul><p>Experience:</p><ul><li>3 years&rsquo; experience on Microsoft Sentinel and app logic: 3 years (Required)</li><li>focusing on SIEM administration or engineering: 2 years (Required)</li><li>cybersecurity: 3 years (Required)</li></ul><p>Language:</p><ul><li>Arabic (Required)</li><li>English (Required)</li></ul><p>License/Certification:</p><ul><li>degree in computer science, Information Security (Required)</li></ul>

SIEM Administrator – Cybersecurity

Explore 1241+ Technology services controller cyber security incident response in Qatar Moph License Jobs In Qatar Moph License Jobs In Qatar Moph License Jobs In Qatar Moph License Jobs In Doha Qatar this November. Find roles across top companies and apply now to boost your career.