Security Infrastructure Engineer

About the role

The Security Infrastructure Engineer will lead the architecture, deployment and optimisation of multi‑cloud SIEM platforms for a leading Security Operations Centre in Doha. You will ensure high availability, performance and advanced threat detection across both IT and OT environments.

Key responsibilities

• Design, implement and manage enterprise‑scale SIEM solutions across Microsoft Sentinel, Google Chronicle Security Operations and Splunk Enterprise Security.
• Develop and maintain detection use cases, analytics rules, dashboards and automated response playbooks.
• Optimise SIEM platforms for performance, scalability and reliability.
• Onboard and normalise diverse log sources from IT and OT environments.
• Stay current with emerging cyber threats and continuously improve detection capabilities.
• Align work with ITIL service management and ISO 27001 security standards.
• Collaborate with cross‑functional teams to enhance SOC monitoring and incident response.
• Provide technical leadership and operate with minimal supervision.

Required profile

• Minimum 5 years of experience in IT services or a related domain.
• At least 5 years of hands‑on experience with SOC‑managed security solutions such as Splunk, Google Chronicle, Microsoft Sentinel or similar.
• Proven experience in design, deployment and administration of SIEM platforms.
• Strong analytical skills and ability to create detection rules and automated playbooks.
• Experience working in a 24x7 SOC environment.

Required skills

• Microsoft Sentinel
• Google Chronicle Security Operations
• Splunk Enterprise Security
• Kusto Query Language (KQL)
• YARA
• Universal Data Model (UDM)
• Microsoft Azure security services
• Google Cloud Platform (GCP) security services
• ITIL framework
• ISO 27001
• Endpoint Detection & Response (EDR)
• Network Detection & Response (NDR)
• Next‑Generation Firewall (NGFW)
• IDS/IPS
• Web Application Firewall (WAF)
• Antimalware solutions
• Web and email filtering tools
• Darktrace
• McAfee ESM
• Qualys
• SOAR platforms