threat hunter

QatarEnergy

<div></div><div><p><b>Job Posting Date: </b>15 Oct 2025
</p><p><b>Work Location:</b> Doha, QA
</p><p><b>Company: </b>QatarEnergy LNG
</p><div><div><div><div><h2 class="jobSectionHeader"><b>Job Specification</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Job Purpose</b></h2>
</div><div><p>
Safeguarding the organization&rsquo;s IT and OT environments by detecting, investigating, and proactively hunting for cyber threats. The role bridges intelligence and operations, turning threat data into actionable detections and hunt activities. Working closely with SOC Team, the specialist enhances detection capabilities and strengthens the organization&rsquo;s overall cyber resilience.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Job Context &amp; Major Challenge(s)
</b></h2></div><div><p>Major challenges are,</p>
<p>
(1)Keeping pace with evolving threat landscape as attackers develop new techniques and strategies.</p>
<p>
(2)Thorough understanding of security operations centre (SOC) 24x7</p>
<p>
(3) supporting the Information Risk Management Division Manager in dealing with an increased cybersecurity risk due to the geopolitical situation</p>
<p>
(4) Contributing to the ongoing continuous improvement of SOC due to the current maturity level and the changing threat level</p>
<p>
(5) Keeping up to date with IT and OT cyber threats to stay ahead of such threats.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Key Job Accountabilities - I</b></h2>
</div><div><ul><li>Perform proactive threat hunting across IT and OT networks using intelligence from the Threat Analyst to uncover stealthy or undetected threats.</li>
<li>Analyse and correlate security incidents to understand attacker behaviour, techniques, and campaign patterns beyond simple alerts.</li>
<li>Bridge threat intelligence with detection logic, translating new IOCs, TTPs, and adversary trends into actionable detection content for the SOC Engineer to implement.</li>
<li>Conduct deep-dive investigations on high-severity alerts, ensuring accurate root cause determination and actionable recommendations.</li>
<li>Support incident response teams during containment and eradication phases by providing context on attacker tools, tactics, and infrastructure.</li>
<li>Collaborate with the SOC Engineer to refine SIEM use cases, detection rules, and SOAR playbooks based on threat hunting outcomes.</li>
<li>Perform malware reverse engineering and behavioural analysis, extracting IOCs, YARA rules and technical findings to feed into threat hunting and detection development.</li>
<li>Develop and maintain threat profiles for key adversaries and attack scenarios targeting both IT and OT environments.</li>
<li>Prepare technical briefings reports summarizing threat findings and lessons learned for management.</li>
<li>Continuously improve analytical techniques, staying current with emerging threats, tools, and frameworks like MITRE ATT&amp;CK.</li>
<li>Ensure alignment with legal and ethical guidelines to ensure team activities are authorized and do not compromise company&rsquo;s integrity or reputation.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Person Specification - Minimum Requirement</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Qualifications</b></h2>
</div><div><ul><li>Bachelor degree level in information security, computer science or engineering.</li>
<li>Holds a relevant professional certification such as (e.g., GCTI, GCIA, GCIH, GREM).</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Knowledge and/or Experience
</b></h2></div><div><ul><li>10 years Information Security experience in a similar position.</li>
<li>Proven experience in cyber threat analysis, hunting, and incident investigation across both IT and OT environments.</li>
<li>Strong understanding of network protocols, malware behaviour, and adversary TTPs aligned with the MITRE ATT&amp;CK framework.</li>
<li>Experience with SIEM/SOAR platforms, threat intelligence tools, and log analysis for advanced threat detection.</li>
<li>Strong analytical and investigative skills with hands-on experience in threat hunting.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Technical and Business Skills</b></h2>
</div><div><ul><li>Ability to assess and evaluate risk and the impact of legislation and actively promotes compliance.</li>
<li>Possesses a good understanding of IT and OT business applications.</li></ul></div></div></div></div></div><p></p>

Cyber Threat Specialist

Trend Micro Inc.

<div><div>When you join Trend, you become part of a unique and diverse global family and you get to work towards a world safe for exchanging digital information.</div><div>
ABOUT TREND MICRO</div><div>
Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital information. Fueled by decades of security expertise, global threat research, and continuous innovation, Trend Micro's cybersecurity platform protects hundreds of thousands of organizations and millions of individuals across clouds, networks, devices, and endpoints. As a leader in cloud and enterprise cybersecurity, the platform delivers a powerful range of advanced threat defense techniques optimized for environments like AWS, Microsoft, and Google, and central visibility for better, faster detection and response. With 7,000 employees across 65 countries, Trend Micro enables organizations to simplify and secure their connected world. For additional information, visit <div>www.trendmicro.com</div></div><div></div><div>
POSITION OVERVIEW</div><div>
The Incident Response Analyst serves as the primary technical responder to active security incidents, interfacing with the Security Operations Center (SOC) and IT infrastructure teams, ensuring the effective containment, eradication, and recovery from cyber threats through rapid forensic analysis and technical mitigation.</div><div></div><div>
PRIMARY RESPONSIBILITIES</div><ul><li>
Oversee all incident response activities reported from detection to incident resolution.</li><li>
Serve as a contact point for suspicious and malicious events escalated by technical support cases, and from the Trend Micro threat hunting efforts and Incident Response Operations.</li><li>
Collect and preserve digital evidence for analysis using traditional DFIR and XDR methods.</li><li>
Analyze different digital forensic artifacts, network traffic, security events to perform root cause analysis and summarize all investigations and conclusions in an incident report.</li><li>
Differentiate between potential intrusion attempts and false alarms, evaluating unknown or suspicious activity and consulting on measures to mitigate their impact on availability and productivity.</li><li>
Review and analyze technical components of malware and other related threat activities in security-related events and different data sources to develop and refine detection criteria and generate threat intelligence.</li><li>
Compose security alert notifications and other communications.</li><li>
Stay up to date with current vulnerabilities, attacks, and countermeasures.</li><li>
Explain different threats to both technical and non-technical parties who do not necessarily have relevant backgrounds and provide consultancy on how to improve security posture to prevent relative threats.</li><li>
Threat Hunting in Telemetry for hidden, dormant threats, or potentially escalating threats</li><li>
Contribution in Detection Engineering in TM products based on Incident Reports or OSINT</li><li>
Occasional evening and weekend shifts may be required.</li></ul><div></div><div>
REQUIRED EXPERIENCE</div><ul><li>
A degree in a related field such as Digital Forensics, security, computer engineering, computer science, Telecommunication/Electronics engineering, Information Technology or equivalent professional certifications preferably GIAC/SANS (GEIR, GX-FA, and/or GCFA are a clear advantage)</li><li>
Eligible to work in Egypt and is ready to be resident in Cairo (or around it). Role is hybrid; employees may be asked to constantly work from the office a few days per week.</li><li>
3+ year experience in a full-time security position involving threat hunting, detection, Digital Forensic investigation and response.</li><li>
Sufficient knowledge of different security controls</li><li>
Sufficient Knowledge of common enterprise&rsquo;s IT infrastructure (Network and several types of OS)</li><li>
Sufficient knowledge on adversary Tactics, Techniques, and procedures and ability to map them to threat modeling frameworks</li><li>
Experience with log analysis, event correlation and incident management procedures and systems, and knowledge of host and network log sources.</li><li>
Experience with host-based digital forensics and threat hunting.</li><li>
Aptitude for learning, self-directed, and working in critical incidents.</li><li>
Must have a powerful sense of duty, diligent in investigation.</li><li>
Ease of communication to internal and external stakeholders in English and Arabic. Communication may include reports, presentations, verbal instant updates, or other forms of communication</li></ul><div></div><div>
PREFERRED EXPERIENCE</div><ul><li>
Total 5+ years of experience in a Cybersecurity/IT/technology relevant role in a structured environment</li><li>
Experience in a comparable vendor or a security service provider</li><li>
Experience in different types of cybersecurity related assessments</li><li>
Malware analysis and threat detection engineering</li><li>
Scripting capability</li><li>
Demonstrated knowledge of Offensive security</li><li>
Experience of Security architecture/controls</li><li>
Familiarity with Trend Micro products and technology</li><li>
A third language proficiency</li><li>
Customer/Executive interfacing experience</li></ul><div></div><div>
Trend Micro strive to build an environment of equity and inclusion, which reflects diverse points of view. We welcome, value, promote, and celebrate diversity - the very experiences and attributes that make us who we are, including but not limited to race, ethnicity, nationality, gender, gender identification, sexual orientation, level of ability, age, religion, veteran status, socio-economic status, and political philosophy.</div><div></div><div>
#LI-Onsite</div><div>
#LI-NA1</div><div></div><div>
We embrace change, empower people, and encourage innovation. Join Trend Micro and Thrive with us.</div></div>

Incident Response Analyst

Eventus Techsol

<p></p><div><div><div>Job Description</div><div><div><p>
Job Title: Security Analyst - L3</p>
<p>
Experience: 5+ years</p>
<p>
Location: Jeddah</p>
<p><b>
Key Responsibility Areas &ndash; </b><b>Security Analyst - L3</b><b> &ndash; SOC</b></p>
<div>
<ul><li><b>Security Incident Leadership: </b>Lead high-priority security investigations and incident response activities, ensuring accurate analysis, containment, remediation, and post-incident reporting.</li></ul>
<ul><li><b>Operational Oversight: </b>Oversee day-to-day SOC operations, including shift handovers, escalation management, and ensuring continuity across a 24/7 environment with global customers.</li></ul>
<ul><li><b>Technical Expertise: </b>Act as the escalation point for complex threats and security incidents requiring deep analysis of logs, packets, malware, and behavioral patterns using EDR, XDR, SIEM, and forensic tools.</li></ul>
<ul><li><b>Threat Detection and Hunting:</b> Conduct proactive threat hunting using various data sources and tools. Create and optimize detection use-cases, correlation rules, and playbooks to enhance threat visibility and reduce dwell time.</li></ul>
<ul><li><b>Process &amp; Playbook Management: </b>Develop, refine, and enforce standard operating procedures (SOPs), playbooks, and incident response workflows to drive consistent and measurable outcomes.</li></ul>
<ul><li><b>Customer Engagement: </b>Interface with global stakeholders (especially US/Canada clients), providing clear incident briefings, RCA reports, and advisory support.</li></ul>
<ul><li><b>Collaboration and Mentorship:</b> Mentor L1 and L2 analysts, conduct training sessions, and support skill development across shifts.</li></ul>
<ul><li><b>Continuous Improvement:</b> Participate in tuning detection content, improving tool configurations, and supporting red/blue/purple team exercises to elevate SOC maturity.</li></ul>
<ul><li><b>Documentation and Reporting:</b> Ensure high-quality documentation of incidents, processes, and technical findings. Contribute to executive and operational reporting.</li></ul>
</div></div></div></div><div></div><div><div><div>
Location</div><div><div>
Jeddah</div></div></div><div><div>
Experience</div><div><div>
5+ years</div></div></div><div><div>
Send Your CV To</div><div><b>
careers@eventussecurity.com</b></div></div></div></div>

Security Analyst - L3

DICETEK LLC

<div><p><b>Responsibilities</b></p><ul><li>
Monitor and analyse the organization's networks and systems on a daily basis to detect, identify, investigate, and mitigate potential threats.</li><li>
Identify anomalous behavior, recognize patterns of malicious activity, and take appropriate corrective action
</li><li>Follow detailed operational process and procedures to appropriately analyse, escalate, and assist in remediation of critical information security incidents.</li><li>
Correlate and analyse events using the Splunk/Log Rhythm SIEM tool to detect IT security incidents.</li><li>
Conduct analysis of log files, including forensic analysis of system resource access.</li><li>
Monitor multiple security technologies, such as SIEM, IDS/IPS, EDR, Firewalls, Switches, VPNs, and other security threat data sources.</li><li>
Respond to inbound requests via phone and other electronic means for technical assistance with managed services.</li><li>
Respond in a timely manner (within documented SLA) to support, threat, and other cases.</li><li>
Document actions in cases to effectively communicate information internally and to customers.</li><li>
Resolve problems independently and understand escalation procedure.</li><li>
Maintain a high degree of awareness of the current threat landscape.</li><li>
Perform other essential duties as assigned.</li><li>
Able to work in rotating shifts within a 24/7 operating environment.</li></ul><p>
</p><p><b>Qualifications &amp; Skills</b></p><p>
</p><ul><li>3-5 years of experience in Security Operations, Incident response and monitoring , threat hunting etc.</li><li>
A Degree in Computer Science, Information Systems or equivalent.</li><li>
CCNA, CompTIA CySA+, CISSP, GCA, GCIA, GCIH, CEH, SIEM-specific certifications would be preferable.</li><li>
An active interest in internet security, incident detection, network and systems security.</li><li>
A sound knowledge of IT security best practices, common attack types and detection/prevention methods.</li><li>
Demonstrable experience of analysing and interpreting system, security, and application logs.</li><li>
Knowledge of the type of events that both Firewalls, IDS/IPS, and other security related devices produce.</li><li>
Experience in using SIEM tools such as Splunk &amp; Log Rhythm.</li><li>
TCP/IP knowledge, networking, and security product experience.</li><li>
Knowledge of Cyber Kill Chain and MITRE ATT&amp;CK frameworks.</li><li>
Possible attack activities, such as scans, man in the middle, sniffing, DoS, DDoS, etc. and possible abnormal activities, such as worms, Trojans, viruses, etc.</li><li>
Ability to analyse data, such as logs or packets captures, from various sources within the enterprise and draw conclusions regarding past and future security incidents
</li><li>Strong analytical and problem-solving skills.</li><li>
Very good communication skills.</li><li>
Strong interpersonal skills with the ability to collaborate well with others.</li></ul></div><p></p>

Security Analyst

All jobs

<div>
 <strong>
  Why choose Logicalis?
  <br/>
  <br/>
 </strong>
 As Architects of Change, Logicalis' focus is to design, support and execute clients' digital transformation by uniting their vision with their technology expertise and industry insights. The company, through its deep understanding of key IT industry drivers such as security, cloud, data management and IoT, can address customer priorities such as revenue growth and business, operational efficiency, innovation, risk and compliance, data governance and sustainability.
 <br/>
 <br/>
 We strengthen our purpose: to design, support, and execute our customers' digital transformation by converging their vision with our technological expertise and knowledge of the industry. The brand refresh underpins both the evolution of Logicalis&rsquo; positioning as well as our strategic vision for growth.
 <br/>
 <br/>
 <strong>
  Job Responsibilities:
  <br/>
  <br/>
 </strong>
 <strong>
  Detection Engineering
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Design, develop, and deploy high-fidelity detection rules in SIEM (Splunk, Microsoft Sentinel, Devo, QRadar, EDR, etc.).
  </li>
  <li>
   Create custom use cases to detect MITRE TTPs aligned with real-world threats and red team activities.
  </li>
  <li>
   Conduct detection gap analysis, tune alerting mechanisms, and eliminate false positives at the MSS customer environment
  </li>
  <li>
   Perform regular fine-tuning and optimization of detection rules, correlation logic, and alert thresholds across SIEM, EDR, and other security platforms to enhance detection accuracy and reduce false positives.
  </li>
  <li>
   Continuously assess detection efficacy based on incident feedback and threat landscape evolution, implementing improvements accordingly.
  </li>
  <li>
   Collaborate with red/purple teams to validate detection logic and build threat-informed defenses.
  </li>
  <li>
   Regularly review, update, and enhance detection logic to ensure alignment with the latest threat intelligence, adversary TTPs, and evolving attack techniques.
  </li>
  <li>
   Maintain relevancy and effectiveness of security detections by incorporating insights from threat hunts, incident response cases, red team exercises, and industry best practices.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Threat Hunting and Threat Intel:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Proactively hunt for advanced threats across on-prem and cloud environments using telemetry from SIEM, EDR, NDR, and threat intelligence.
  </li>
  <li>
   Develop hypotheses based on TTPs, threat intelligence feeds, and incident trends.
  </li>
  <li>
   Use frameworks like MITRE ATT&amp;CK and Diamond Model to structure hunting campaigns.
  </li>
  <li>
   Document hunt procedures and outcomes to support knowledge sharing and continuous improvement.
  </li>
  <li>
   Map threat actor TTPs to frameworks such as MITRE ATT&amp;CK to support proactive defense strategies and inform detection engineering efforts.
  </li>
  <li>
   Provide actionable threat intelligence to SOC, detection engineering, and IR teams to inform custom detection rule development, prioritization of hunts, and incident scoping
  </li>
  <li>
   Contribute to the threat intelligence lifecycle, including direction, collection, processing, analysis, dissemination, and feedback.
  </li>
  <li>
   Ingest, analyze, and operationalize threat intelligence from internal sources, commercial feeds, and open-source intelligence (OSINT) to enrich detection logic, threat hunting hypotheses, and incident investigations
  </li>
  <li>
   Collaborate with internal and commercial threat intelligence teams to contextualize IOCs and TTPs for targeted and industry-specific threats.
  </li>
  <li>
   Maintain up-to-date threat intelligence repositories and contribute to the continuous improvement of threat intel processes and playbooks
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Incident Response:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Lead incident response lifecycle (detection, triage, containment, eradication, recovery).
  </li>
  <li>
   Handle security incidents tickets escalated by Level II team, and draft security incident report covering the root cause, forensic evidence, and recommended mitigation plans
  </li>
  <li>
   Conduct/support forensic analysis of endpoints, logs, and network traffic to determine root cause and impact.
  </li>
  <li>
   Coordinate with internal stakeholders and external partners during critical incidents.
  </li>
  <li>
   Develop and maintain playbooks, runbooks, and incident reports.
  </li>
  <li>
   Digital Forensics and Incident Response (DFIR) experience is a strong added advantage, enabling deeper investigations and root cause analysis.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Collaboration &amp; Mentorship :
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Mentor and support L1/L2 SOC analysts in investigations, tool usage, and processes.
  </li>
  <li>
   Participate in tabletop exercises and red/purple team assessments.
  </li>
  <li>
   Lead and conduct regular customer meetings to review SOC activities, including security posture, key metrics, and ongoing initiatives.
  </li>
  <li>
   Prepare and deliver detailed briefings on priority incidents, RCA, ensuring timely communication of root cause, impact analysis, mitigation steps, and next actions.
  </li>
  <li>
   Act as a primary point of contact for Incident escalations and maintain consistent, professional engagement with client stakeholders.
  </li>
  <li>
   Coordinate with cross-functional teams including Engineering, Development, Red Team, and Risk/Compliance.
  </li>
  <li>
   Identify gaps in existing SOC process and work with team members or other departments to create, modify standard operating procedures, to automate any mundane daily operational activities, ensuring Ops are run efficiently.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Requirements:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Candidate should have at least 8-10 years of working experience in SOC and MSS environments,
  </li>
  <li>
   Bachelor's degree in computer engineering, Computer Science, Cyber Security, Information Security, or other equivalents.
  </li>
  <li>
   Excellent hands-on experience in implementations, incident analysis of Splunk, IBM QRadar, Azure Sentinel SIEM (Security Information and Event Management) &amp; Devo technologies.
  </li>
  <li>
   Hands on experience on any Endpoint Protection (EPP) or Endpoint Detection Response (EDR) technologies. Preferred if CrowdStrike, Microsoft Defender.
  </li>
  <li>
   Hands on experience on SOAR (Security Orchestration, Automation, and Response) technologies.
  </li>
  <li>
   Experience in malware analysis for Windows and Linux/Mac.
  </li>
  <li>
   Exposure to firewall technologies such as Cisco, Palo Alto, Checkpoint, Fortinet.
  </li>
  <li>
   Good understanding of WIN, LINUX environments and well versed with basic LINUX commands and troubleshooting, with proven Unix (Solaris, Linux, BSD (Bumi Serpong Damai)) experience.
  </li>
  <li>
   Knowledge of any shell scripting language and applying it to automate mundane operations tasks
  </li>
  <li>
   Knowledge of current cyber threats, attack vectors, vulnerabilities, and threat intelligence feeds.
  </li>
  <li>
   Ability to work effectively in a team environment, collaborate cross-functionally, and mentor junior analysts
  </li>
  <li>
   Candidate should have at least one SANS certification. Preferred if that is GCIH
  </li>
  <li>
   Good understanding of basic network concepts and advantages of exposure to cloud technologies.
  </li>
  <li>
   Lateral thinking combined with excellent troubleshooting skills, preferably with experience following ITIL (Information Technology Infrastructure Library) standards
  </li>
  <li>
   Lead team of security analysts, develop SOC standard operating procedures and develop Threat Intel feeds such as MISP.
   <br/>
   <br/>
  </li>
 </ul>
 Interested applicants please submit your application with your expected salary and notice period to be considered for the role.
 <br/>
 <br/>
 We regret that only shortlisted candidates will be notified.
 <br/>
 <br/>
 As part of any recruitment process, we collect and processes personal data relating to job applicants. We are committed to being transparent about how we collect and use that data and to meeting our data protection obligations. By applying to this post and sending us your resume, you agree to the collection, use and/or disclosure of your personal data in the manner as set out in our Data Protection Notice for Job Applicants which can be found
 <br/>
 <br/>
 Logicalis is committed to protecting your privacy.
 <br/>
 <br/>
 Click below to view the data protection notice.
 <br/>
 <br/>
 https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf.
</div>


Senior Security Analyst

Technology Control Company | شركة تحكم التقنية

<div>
 <p>
  <strong>
   Key Responsibilities:
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Collect and verify raw intelligence from multiple strategic and tactical data sources and correlate collected intelligence to build upon a larger knowledge.
  </li>
  <li>
   Research threats, vulnerabilities, and intelligence on various attackers and attack infrastructure using internal and external resources.
  </li>
  <li>
   Automate tracking and discovery of threats leveraging internal and external data sources.
  </li>
  <li>
   Contribute to the production of reports detailing threat groups including TTPs.
  </li>
  <li>
   Analyze logs and perform log correlations to identify anomalous/malicious behavior utilizing.
  </li>
  <li>
   Responding to prioritized requests for information (RFI) and provide key findings to enable the production of finished intelligence.
  </li>
  <li>
   Develop Attack detection response playbooks, counter-measure definition, and strategies to mitigate emerging threats.
  </li>
  <li>
   Develop use cases mapped to common frameworks (e.g., MITRE ATT&amp;CK) for detecting new/evolving threats, including supporting content for security tools (e.g., SIEM rules, NIDS signatures, EDR content, etc.).
  </li>
  <li>
   Plan and execute regular simulation attack exercises (red-team/blue-team / purple-team) to validate detection, response, and remediation capabilities and improve MSOC readiness.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Qualifications:
  </strong>
 </p>
 <ul>
  <li>
   Bachelor of Computer Science or equivalent
  </li>
 </ul>
 <p>
  <strong>
   Professional Certifications:
  </strong>
 </p>
 <ul>
  <li>
   Professional certification in pen testing from internationally recognized institution or relevant are preferred.
  </li>
 </ul>
 <p>
  <strong>
   Years of Experience:
  </strong>
 </p>
 <ul>
  <li>
   6+ years of prior experience
  </li>
 </ul>
 <p>
  <strong>
   Nature of Experience:
  </strong>
 </p>
 <ul>
  <li>
   2 years in security operation and threat hunting and 2 years in threat intelligence
  </li>
 </ul>
 <p>
  <strong>
   Job Specific Skills:
  </strong>
 </p>
 <ul>
  <li>
   Practical experience in Identifying and investigating information security incidents and developing recommendations to prevent similar incidents in the future.
  </li>
  <li>
   Understanding of the methods, tools, and processes to respond to information security incidents.
  </li>
 </ul>
 <p>
 </p>
</div>


Principle SOC Research Consultant

<div>
 <strong>
  Primary Purpose Of The Job
  <br/>
  <br/>
 </strong>
 Responsible for leading the Offensive red teaming activities on QatarEnergy&rsquo;s IT/OT environments, by conducting threat hunting, penetration testing, Vulnerability scanning and security assurance activities. Provides oversight and technology guidance as well as managerial support as required. Oversee the execution of incident management program and supervises and coordinates engineers and external consultants to design, build and manage QatarEnergy SOC Red team functions on QatarEnergy&rsquo;s IT and OT cyber security mission critical operational expansion.
 <br/>
 <br/>
 <strong>
  Required Experience And Skills
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Strong understanding of cyber incident management, malware management and vulnerability management processes.
  </li>
  <li>
   Solid knowledge on Malware analysis, Vulnerability assessment &amp; Forensic &amp; memory analysis, and data analytics
  </li>
  <li>
   Experience with large ICS &amp; ICT environments in the Energy sector is a big plus.
  </li>
  <li>
   Advanced knowledge of networking fundamentals (TCP/IP, network layers, Ethernet, etc) Advanced knowledge of current threat landscape (threat actors, APT, cyber-crime, etc) Advanced knowledge of penetration techniques and forensic techniques. Protocol analysis knowledge and experience (Wireshark, Netwitness, etc.) Solid knowledge of client-server applications, multi-tier web applications, relational databases.
  </li>
  <li>
   Solid knowledge and experience with Cloud technologies (Amazon, Azure, Google Cloud, IaaS, SaaS etc.)
  </li>
  <li>
   Good knowledge of IT including multiple operating systems and system administration skills (Windows, Unix)
  </li>
  <li>
   Solid understanding of IT governance and processes, such as ITIL, COBIT.
  </li>
  <li>
   Possession of Industry Certifications ISACA, GCIA, SANS, ICS2, EC-Council, other relevant cyber security certifications. (such as CISSP, CISM, (GCIH), (GIAC), (CEH), (CEPT), OSCE, CHFI, GREM or equivalent security technologies technical certification (Advanced Level)
  </li>
  <li>
   Must maintain professional demeanor in stressful situations.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Educational Qualifications
  <br/>
  <br/>
 </strong>
 Bachelor&rsquo;s degree in information security, computer science, or systems engineering. 10+ years of technical experience in Information Security, System Administration, or Network Engineering with at least 5 years of experience in Information Security.
</div>


PENETRATION TEST ANALYST

Search 606+ Threat hunter jobs near you this October. New roles added regularly across leading industries. Apply today.