Information Security Monitoring Analyst

About the role

The Information Security Monitoring Analyst will join Qatar Petroleum’s Security Operations Centre to monitor, analyse and respond to security alerts generated by SIEM platforms and threat‑intelligence feeds. Working 12‑hour shift patterns, the analyst provides real‑time detection of anomalies, triages incidents and supports remediation actions to protect critical systems and data.

Key responsibilities

• Monitor alerts from SIEM and threat‑intelligence sources, filtering false positives.
• Investigate potential security incidents, determine impact on critical assets, and document findings.
• Provide technical analysis, recommend containment and remediation steps, and escalate complex cases.
• Maintain incident narratives and support broader incident‑response activities.
• Operate a range of security tools (IDS, IPS, firewalls, WAF, web‑content filtering, etc.) and ensure 24/7 coverage.

Required profile

• 5+ years of experience in large‑scale IT environments with a focus on information security.
• 2+ years operating industry‑leading SIEM products.
• 1‑3 years experience in a Security Operations Centre conducting investigations.
• Strong understanding of networking protocols (TCP/IP, LAN/WAN, SMTP, HTTP, FTP, POP, LDAP).
• Knowledge of vulnerability assessment and penetration testing concepts.

Required skills

• SIEM and threat‑intelligence feed analysis.
• Windows and Unix system administration.
• Client‑server, multi‑tier web applications and relational databases.
• Firewalls, VPNs, enterprise anti‑virus, IDS/IPS, WAF, and web‑content filtering.
• TCP/IP, LAN/WAN, SMTP, HTTP, FTP, POP, LDAP.
• Vulnerability assessment and penetration testing.
• SANS Critical Security Controls and OWASP knowledge.