Cyber Security Engineer

About the role

The Cyber Security Engineer will join our Security Operations Center (SOC) in Doha, focusing on the design, implementation and ongoing management of SIEM solutions across a large enterprise environment. You will work closely with infrastructure and application teams to ensure comprehensive threat detection and response capabilities.

Key responsibilities

• Develop, update and configure custom detection rules within CSOC security technologies.
• Create dashboards and reports to highlight potential threats, anomalous activity and malware incidents.
• Assist in the design, evaluation and deployment of new security tools and technologies.
• Perform day‑to‑day maintenance of SIEM, IBM Resilient, Carbon Black and Tenable platforms.
• Monitor and optimise performance, health and access rights of SIEM content at an enterprise level.

Required profile

• Minimum 3 years of hands‑on experience designing and implementing SIEM solutions in large enterprises.
• Proven experience integrating log sources, deploying connectors and managing SIEM administrative content.
• Good working knowledge of UNIX, Windows, networking, firewalls, IDS/IPS and proxy systems.
• Understanding of the software development life‑cycle, regular expressions, Perl and Python.
• CCIE certification is mandatory.

Required skills

• SIEM platforms (e.g., IBM Resilient, Carbon Black, Tenable)
• Log source integration and connector deployment
• PHP web‑application development (nice to have)
• UNIX and Windows server administration
• Networking technologies, firewalls (Palo Alto, Cisco ASA, Sourcefire)
• IDS/IPS (Tipping Point, FireEye)
• Proxy and WAF solutions (Bluecoat, F5, Symantec Mail Gateway)
• Programming/scripting: Perl, Python, regular expressions
• Code versioning and collaborative tools