Cybersecurity Detection Engineer

Employment; Doha; On-site; QAR 180,000 - 240,000; Full time

Job summary

Techpace in Doha seeks an L3 SOC Analyst to strengthen its cybersecurity operations. You will work with multiple SIEM and EDR tools to detect, investigate and respond to threats, while guiding junior engineers in a fast‑paced environment.

Responsibilities include developing and tuning detections, reducing false positives, and ensuring coverage aligned with MITRE ATT&CK and the Cyber Kill Chain across on‑prem and cloud platforms.

Qualifications

• Minimum 5 years of experience in Cyber Security as a SOC analyst.
• Strong understanding of SIEM products from analysis and administrative perspectives.
• Broad knowledge of Windows, Linux, Active Directory, IAM, IDS/IPS, Firewalls, EDR, cloud security.
• Familiarity with threat intel feeds and integrating them into detections.
• Understanding of cybersecurity frameworks and standards, and threat hunting experience.

Responsibilities

• Develop, test and tune detections and parsers for various tools and technologies.
• Improve detection quality, reduce false positives, and align with MITRE ATT&CK and Cyber Kill Chain.
• Monitor on‑prem and cloud environments to support SOC operations; develop complex detection content.
• Mentor and train junior analysts and engineers.

Skills

SOC analysis

SIEM

EDR

Threat detection

Incident response

Networking concepts

Mentoring

Education

GCDA

CISSP

GCFA

GMON

Tools

Splunk

QRadar

Elastic SIEM

CrowdStrike

Job description

Company Description

Techpace is a leading provider of cybersecurity consulting services designed to help organizations maximize their return on investments in security. The company specializes in crafting advanced cyber threat detection strategies, incident response planning, and delivering tailored consulting services. With expertise in security operations and compliance, Techpace also offers professional services and legal advisory support to ensure organizations meet regulatory requirements and maintain robust security postures.

Role Description

L3 SOC Analyst experts in the field with a strong background of multiple SIEM and EDR solutions.

Key Responsibilities

• Develop, test and tune both detections and parsers for various tools and technologies.
• Perform continuous improvement and validation t o ensure accuracy and efficiency, and enablecomprehensive coverage based on the industry standards (MITRE ATT&CK and Lockheed Martin's Cyber Kill Chain) Work to reduce false positives and improve the computational efficiency of Rules and Use-Cases.
• Continuously evaluate and optimize detection content monitoring various on-prem and cloudservice provider environments in support to SOC operations Advanced skill in developing complex detection content using various data sources and query languages.
• Responsible for mentoring and training of Junior Analysts and Engineers.

Qualifications

A minimum of 5 years o f experience in Cyber Security, specifically as a SOC analyst.computer networks/networking concepts. Strong understanding of various SIEM products from both analysis and administrative perspectives. Understand and master data sources across a variety of categories including Windows, Linux,Active Directory, Privileged Access Management, Intrusion Detection/Prevention, Firewalls, Anti-Virus, Endpoint Detection & Response, Cloud Access Security Broking, Network Access Control,Application Control and Productivity Apps. Proven experience i n threat detection, incident response, and security operations. In-depth knowledge of security technologies, including SIEM, IDS/IPS, EDR, etc. Familiarity with common threat intelligence feeds and the ability t o integrate them into detection systems. Excellent knowledge o f cybersecurity frameworks and standards. Strong understanding o f network and endpoint security. Performed Threat Hunting activities previously.

Relevant certifications such as:Certified Detection Analyst (GCDA). Certified information system security professional (CISSP). Certified Forensics Analyst (GCFA). Continues Monitoring Certification (GMON).