Overview
Security Operations Officer Jobs in Doha, Qatar at Edison Smart®
Title: Security Operations Officer
Company: Edison Smart®
Location: Doha, Qatar
Security Operations Officer
Location: Doha
Employment Type: Full-Time
Priority: High
Salary: AED 25,000–27,500 per month
Overview
Our client is seeking an experienced Security Operations Officer to join its cybersecurity team. The successful candidate will be responsible for detecting and responding to cyber threats, strengthening the security and resilience of enterprise infrastructure and data, and conducting penetration testing activities.
Key Responsibilities
1. Incident Monitoring & Detection
- Continuously monitor security alerts from SIEM, IDS/IPS, firewalls, endpoint protection platforms, and other security technologies.
- Analyse alerts to distinguish false positives from genuine security incidents and escalate where appropriate.
- Correlate and analyse log data to identify potential security events.
2. Incident Response
- Respond to escalated security incidents, including advanced threat detection, malware analysis, and forensic investigations.
- Coordinate with internal teams and external stakeholders to contain and remediate security incidents.
- Maintain detailed documentation of incidents and response activities.
3. Threat Intelligence & Threat Hunting
- Leverage threat intelligence sources to enrich alerts and support investigations.
- Conduct proactive threat hunting to identify previously undetected threats.
- Stay current with emerging cyber threats, vulnerabilities, and attack techniques.
4. Security Tool Management
- Support the configuration, optimisation, and maintenance of security monitoring platforms.
- Develop and enhance detection rules, use cases, and incident response playbooks.
5. Collaboration
- Work closely with infrastructure, networking, and application teams during investigations.
- Provide regular updates to stakeholders on incident progress and remediation efforts.
6. Reporting & Documentation
- Produce reports covering security incidents, trends, root causes, and improvement recommendations.
- Maintain SOC documentation, operational procedures, and incident response processes.
7. Penetration Testing
- Plan and perform regular penetration tests across networks, systems, and applications.
- Utilise industry-standard tools and methodologies to identify security weaknesses.
- Produce detailed assessment reports with practical remediation recommendations.
- Work with IT and development teams to implement security improvements.
Requirements
Experience
- 10–14 years' experience within a Security Operations Centre (SOC) or similar cybersecurity function.
- Proven experience across:
- Security monitoring
- Incident detection and response
- Threat intelligence
- Threat hunting
- Penetration testing
Education
- Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Security, or a related discipline.
Certifications (Preferred)
- CEH
- GPEN
- OSCP
- Other recognised offensive security or cybersecurity certifications
Technical Skills
- Strong experience with SIEM platforms.
- Hands-on experience with:
- IDS/IPS
- Firewalls
- Endpoint Detection & Response (EDR)
- Network Detection & Response (NDR)
- Vulnerability Management solutions
- Strong understanding of networking technologies including TCP/IP, DNS, HTTP/S and SSL/TLS.
- Experience with Windows and Linux security.
- Knowledge of penetration testing tools and methodologies.
- Experience using threat intelligence to support investigations.
- Proven threat hunting experience.
- Strong understanding of the incident response lifecycle:
- Preparation
- Detection
- Analysis
- Containment
- Eradication
- Recovery
- Practical experience with:
- SIEM
- EDR
- Vulnerability Management
- Penetration Testing
- Threat Intelligence
- Incident Response
- Log Analysis & Correlation
- Scripting & Automation
- Familiarity with security frameworks including:
- ISO 27001
- NIST
- MITRE ATT&CK
