Senior SOC Engineer

Senior SOC Engineer

Location: Qatar

Experience: 8+ Years

Industry: Information Technology / Cybersecurity

Job Purpose

We are seeking a highly skilled Senior SOC Engineer with a strong background in Security Operations, Threat Detection, and Vulnerability Management. The ideal candidate will possess 8+ years of hands-on experience in IT Security Systems, leading incident response, engineering detection use cases, and managing the end-to-end vulnerability lifecycle to protect critical infrastructure.

Key Responsibilities

• Security Monitoring & Incident Response: Lead real-time monitoring and advanced security incident investigations across SIEM, XDR, NDR, OT, and cloud platforms. Conduct deep Root Cause Analysis (RCA), coordinate containment/eradication, and strictly maintain SLA/KPI targets.
• Detection Engineering: Develop, tune, and optimize SIEM/XDR correlation rules aligned with the MITRE ATT&CK framework. Drive log source onboarding, parser development, and false-positive reduction to improve overall detection coverage.
• Vulnerability Management: Oversee the end-to-end vulnerability lifecycle (discovery to remediation validation). Perform risk-based prioritization using CVSS and threat intelligence, specifically leveraging tools like Tenable or Qualys.
• Threat Hunting: Conduct proactive, hypothesis-driven threat hunting exercises and integrate actionable threat intelligence feeds into monitoring platforms.
• Reporting & Governance: Translate complex technical findings into business risk metrics. Generate executive dashboards tracking patch compliance, vulnerability aging, risk acceptances, and audit evidence.

Qualifications & Requirements

• Education: Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or a related field.
• Experience: Minimum 8+ years of core experience in Information Security and SOC environments.
• Mandatory Certification (At least one):
• Tenable Certified Nessus Professional (TCNP)
• Tenable Certified Security Center (TCSC)
• Qualys Certified Specialist – Vulnerability Management (VMDR)
• Qualys Certified Specialist – Web Application Scanning (WAS)
• Preferred Certifications: CEH, Microsoft SC-200, or OSCP.
• Technical Skillset: Strong command over SIEM tools, EDR/XDR, Threat Hunting, Cloud Security (AWS/Azure/GCP), and basic scripting (Python, PowerShell, KQL, or SPL).