Security Operations Officer

About the Role

Our organization is looking to recruit an experienced Security Operations Officer to enhance the cybersecurity capabilities of our enterprise. Positioned in Doha, this full-time role demands a professional skilled in identifying and addressing cyber threats, safeguarding the enterprise's infrastructure, and performing penetration testing exercises.

Key Responsibilities

• Continuously monitor alerts triggered by SIEM, IDS/IPS, firewall systems, endpoint protection, and other security tools to identify security issues.
• Distinguish false alarms from genuine security incidents and escalate critical cases appropriately.
• Analyze and correlate logs to detect potential security breaches or events.
• Take charge of advanced incident responses, including malware examination and forensic analysis.
• Collaborate with internal teams and external parties to control and resolve security breaches.
• Document all security incidents and response actions meticulously.
• Utilize threat intelligence data to enrich alert investigations and perform proactive threat hunting to uncover hidden risks.
• Maintain up-to-date knowledge of emerging threats, vulnerabilities, and attack trends.
• Manage and optimize security tools, such as detection rules, monitoring platforms, and incident response playbooks.
• Coordinate with infrastructure, network, and application teams during investigations and provide updates to stakeholders on ongoing incidents and mitigation progress.
• Generate comprehensive reports on security incidents, trends, root cause analyses, and suggest improvements.
• Plan and execute scheduled penetration tests on networks, systems, and applications using standardized industry methods.
• Produce detailed assessment reports with actionable remediation steps and work alongside IT and development teams for implementation.

Required Qualifications and Skills

• A Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Information Security, or a related field.
• At least 10 to 14 years of experience in a Security Operations Centre or equivalent cybersecurity environment.
• Proven expertise in security monitoring, incident detection and response, threat intelligence, threat hunting, and penetration testing.
• Professional certifications such as CEH, GPEN, OSCP, or other recognized offensive security credentials are preferred.
• Hands-on familiarity with SIEM solutions, IDS/IPS, firewalls, Endpoint Detection & Response (EDR), Network Detection & Response (NDR), and vulnerability management tools.
• Deep understanding of networking protocols including TCP/IP, DNS, HTTP/S, and SSL/TLS.
• Experience working with Windows and Linux security ecosystems.
• Competence in penetration testing tools and methodologies.
• Adept at using threat intelligence to support investigations and with practical threat hunting skills.
• In-depth knowledge of the incident response lifecycle phases: preparation, detection, analysis, containment, eradication, and recovery.
• Proficiency with scripting and automation to streamline security workflows.
• Familiarity with security frameworks such as ISO 27001, NIST, and MITRE ATT&CK.

Additional Information

This role requires a high level of security expertise and hands-on capability in both defensive and offensive cybersecurity practices. The position entails full-time on-site work based in Doha, Qatar, with a competitive monthly salary ranging from AED 25,000 to AED 27,500. The successful candidate will be expected to maintain comprehensive security documentation and operational procedures within the Security Operations Centre (SOC) environment.