Security Operations Center (SOC) Analyst

About the role

Madre Integrated Engineering is hiring a full-time Security Operations Center (SOC) Analyst in Doha within the oil and gas sector. The role centres on monitoring security alerts, investigating incidents and supporting incident response in a 24/7 SOC environment.

Key responsibilities

• Continuously monitor security alerts and events through SIEM and other monitoring platforms.
• Analyse and investigate suspicious activity, security incidents and potential cyber threats.
• Classify, prioritise and escalate incidents according to established procedures.
• Perform initial containment and support incident-response and recovery activities.
• Analyse logs from firewalls, endpoints, servers, applications and network devices.
• Conduct threat hunting and identify indicators of compromise.
• Maintain incident records, investigation findings and shift-handover reports.
• Fine-tune SIEM rules, alerts, dashboards and use cases to reduce false positives.
• Coordinate with infrastructure, network, application and cybersecurity teams during investigations.
• Stay up to date on emerging threats, vulnerabilities and attack techniques.

Required profile

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science or a related discipline.
• Minimum 5 years of relevant experience in SOC operations or cybersecurity monitoring.
• Willingness to work rotational shifts in a 24/7 SOC environment, if required.
• Strong analytical, documentation and communication skills.

Required skills

• Hands-on experience with SIEM, EDR, IDS/IPS, SOAR and threat-intelligence platforms.
• Incident detection, investigation, response and escalation procedures.
• Good understanding of TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls and common network protocols.
• Familiarity with malware analysis, phishing investigations, threat hunting and log analysis.
• Certifications such as CompTIA Security+, CySA+, CEH or GCIH are preferred.