SOC Analysis

6 days ago

Doha, Qatar Novel Overseas Corporation Full time

**Job description**

**SOAR Engineer Role Profile Position**:
**SOAR Engineer Location: Doha, the State of Qatar**

**Total Experience: A minimum of 3-years’ experience in SOAR implementation and support, or a minimum of 5-years or more experience in a cyber security engineering role**.

**Description**:
**Required Skills**:

- Strong knowledge of frameworks such as Cyber Kill Chain, the MITRE ATT&CK Framework and Adversary Tools Tactics/Techniques and Procedures
- Understanding of classic and emerging threat actor tactics, techniques and procedures in both pre-exploitation and post-exploitation phases of attack lifecycles
- Experience using Python for the purpose of automating security operations and incident response processes.
- Strong understanding of security architecture, tool integration, API development and automation.
- Deep understanding of Incident Response processes (Detection, Investigation, and response).
- Understanding of common SOC and SOAR processes and workflows.
- Working knowledge of network TCP/IP protocols.
- Experience using ELK and a working knowledge of SIEM tools, EDR/NDR/XDR tools, and other security solutions.
- Exceptional written and verbal communication skills.

**Educational Qualifications**:

- Relevant Degree Additionally, one or more relevant industry certification such as GCIH or vendor certification Swimlane Certified SOAR Administrator (SCSA) Swimlane Certified SOAR Developer (SCSD).

**Desirable**:

- Familiarity and experience working within the region
- Experience working as part of a MSSP or MDR provider
- Experience working with continuous operations (24/7)
- Experience with Security Orchestration, Automation and Response (SOAR) technologies
- Experience with Python scripting language for automation and Working knowledge of REST APIs, JSON, HTML/CSS, JavaScript, XML
- Experience with operating system internals for both Linux and Windows platforms.
- Knowledge of networking and network protocols (TCP/UDP, DNS, HTTP/HTTPS, SSH, FTP, etc.

)
- Experience with log management platforms (Elasticsearch/Logstash/Kibana - ELK / Elastic Stack) and SIEM tools
- Experience with network and host-based monitoring and detection tools e.g., EDR/NDR/XDR solutions.

**Roles and Responsibilities**:

- Act as a Technical Subject Matter Expert, be the primary point of contact for Security Automation, Orchestration, Playbooks, Python Automation, API-based automation, Incident Response lifecycle automation, and Security Automation
- Develop, implement, and execute standard procedures for SOAR platform administration.
- Design, Deployment, and Maintenance of SOAR platforms (including content management, change management, version/patch management, and lifecycle management).
- Work closely with the Security Operations Center (SOC) and Security Engineering teams to improve existing automation and deliver resilient security solutions
- Assess, design, and improve SOC processes and workflows with a focus on integrating automation through Security Orchestration, Automation and Response (SOAR) tools.
- Implement SOC automation and ensure continued compatibility with existing detection and response tools
- Integrate new sources and build playbooks to properly triage and respond to security incidents while reducing the time needed to analyze each event.
- Develop custom scripts to automate current detection and response workflows.
- Build pipelines to enrich logs and alert results to provide a comprehensive view for SOC analysts.
- Operate and help mature a SOC playbook, workflow automations and use cases
- Assist with client setup transition and onboarding, serve as primary point of contact for Managed Security Service client.

**Salary**: QAR6,000.00 - QAR13,000.00 per month

Ability to commute/relocate:

- Doha: Reliably commute or planning to relocate before starting work (required)

  • SOC Operator

    6 days ago

    Doha, Qatar Proztec Full time

    **Job Title**: SOC Operator (SOC L1 Analyst) **Reports to**: SOC Manager **Department**: Information Technology Services **Job Purpose** The SOC L1 Analyst plays a crucial role in monitoring and protecting both IT and Operational Technology (OT) environments, providing 24/7 support to detect and address security threats. The main tasks include initial...

  • Job Opportunity

    6 days ago

    Doha, Qatar Proztec Full time

    **Job Title**: SOC Engineer (SOC Tools Administrator) **Department**: Information Technology Services **Reports to**: SOC Manager **Job Purpose** As a SOC Engineer, you will play a key role in supporting, integrating, and maintaining security tools for both IT and OT systems. You'll help detect and address sophisticated cyber threats across a range of...

  • Senior Engineer

    10 hours ago

    Doha, Qatar People Dynamics Full time

    Role: Work on multiple Solutions include SIEM, SOAR, Log management, EDR and vulnerability management solutions and possibly other Security components to investigate and response to security related incidents and alerts. Roles and Responsibilities: - Triage and Investigate the assigned Incidents. - Create incident reports Include all the investigation...

  • SOC Senior Analyst

    6 days ago

    Doha, Qatar Proztec Full time

    **Job Title**: SOC Senior Analyst **Department**: Information Technology Services **Job Purpose** The SOC Senior Analyst (L3) is responsible for leading the investigation and response to complex security incidents, particularly those affecting Operational Technology (OT) systems like SCADA, ICS, and PLCs. You’ll be the go-to expert for handling major...

  • Senior SOC Analyst

    4 days ago

    Doha, Qatar Mannai Corporation Full time

    **Role**: Senior SOC Analyst **- Monitoring and analysis of cyber security events with the use of (SIEM) and other tools. - SOAR experience to Design and configure automation and workbooks. - SIEM as MS sentinel and Q-radar and other tools use case management (alerts and reports) as per industry best practices. - Monitor EDR to detect and investigate...

  • L3 SOC Analyst

    4 days ago

    Doha, Qatar INFRA ASSURE Full time

    We are seeking a highly skilled and experienced **Level 3 SOC Analyst** to join our Cybersecurity team. This role is critical in leading advanced threat detection and response activities, providing expert-level support in incident resolution, and enhancing our threat defense capabilities. The ideal candidate will serve as the final escalation point within...

  • SOC Analyst

    2 days ago

    Doha, Baladīyat ad Dawḩah, Qatar i4 Solutions Full time

    Date: Oct 2, 2025Location:Doha, QACompany: i4 Solutions W.L.LReq ID: 2273Job TitleSOC AnalystJob ScopeThe SOC analyst will monitor and fight threats on behalf of our client's IT infrastructure, and to assess security systems and measures for weaknesses and possible improvements. The SOC analyst is responsible for ensuring the protection of digital assets...

  • SOC Lead Detection and Dfir

    2 weeks ago

    Doha, Qatar Al Zubarah Information Technology Full time

    _**Role Overview**:_ The SOC Lead Detection and DFIR (Digital Forensics and Incident Response) is responsible for leading a team of cybersecurity analysts in detecting and responding to security incidents. This role involves overseeing the day-to-day operations of the Security Operations Center (SOC), managing incident response activities, and conducting...

  • Senior Engineer

    1 week ago

    Doha, Qatar People Dynamics Full time

    **Description**: - Responsible for monitoring cyber security solutions in support of detection and analysis of potentially compromised systems, performing root cause analysis, and supporting remediation efforts. - Has a good technical knowledge of IT and OT cyber security and an interest in becoming an expert in OT security. - Possess hands-on experience...

  • L2 SOC Analyst

    6 days ago

    Doha, Qatar Mindstream Full time

    Job Advertisement - L2 SOC Analyst (Level 2) Location: Qatar Duration: 3 Years Role Summary: The L2 SOC Analyst serves as the second line of defense, conducting in-depth investigation, analysis, and response to escalated security incidents. This role ensures proper containment, remediation, and detailed reporting of threats. Key Responsibilities: Investigate...