SOC Analyst

About the Role

Core Responsibilities

• Serve as the final technical escalation point for high-severity and complex security alerts.
• Drive incident investigations through containment, eradication, recovery, and post-incident review.
• Hunt for threats across endpoint, network, identity, and cloud environments.
• Map threat-hunting findings to the MITRE ATT&CK framework.
• Investigate ransomware, privilege escalation, lateral movement, data exfiltration, and malware.
• Develop, fine-tune, and optimize SIEM correlation rules, use cases, and alert logic.
• Build and maintain SOPs, runbooks, and incident-response playbooks.
• Champion security automation and SOAR initiatives.
• Partner with Infrastructure, Cloud, IAM, and Network teams during critical incidents.
• Mentor and provide technical guidance to Tier 1 and Tier 2 analysts.

Required Qualifications and Skills

• At least 8 years of dedicated cybersecurity experience focused on SOC operations, incident response, and threat hunting.
• Deep hands-on experience with a top-tier SIEM such as Microsoft Sentinel, Splunk ES, IBM QRadar, or Google Chronicle.
• Experience using EDR/XDR platforms such as CrowdStrike, Microsoft Defender XDR, or SentinelOne with SOAR orchestration.
• Advanced knowledge of Windows or Linux, Active Directory, network security, and cloud architectures.
• Proficiency in Python, PowerShell, or Bash scripting for automation.
• At least one active SANS/GIAC certification is mandatory.
• Accepted certifications include GCIH, GCFA, GCIA, GNFA, GCFE, GCTI, GSOC, and GSEC.

Preferred Qualifications

• Additional certifications such as CISSP, CCSP, OSCP, SC-200, or SC-100 are preferred.
• Experience in enterprise, government, critical infrastructure, or MSSP environments is preferred.
• Familiarity with NIST, ISO 27001, or CIS frameworks is preferred.

Work Arrangement

• Candidates must be willing and able to relocate to Qatar.
• The role is 100% onsite.
• Shift work or on-call rotations may be required during critical incidents.

Candidate Profile

• Exceptional written and verbal English skills are required for translating technical forensics into stakeholder reports.
• Significant professional experience in European markets is highly preferred.