Lead SOC Engineer: Threat Hunting & Incident Response

Employment; Doha; On-site; QAR 250,000 - 350,000; Full time

Job summary

Management Solutions International (MSI) - Qatar, Doha is recruiting a Senior SOC Engineer to lead security monitoring, threat detection and vulnerability management across enterprise IT, OT, and cloud environments.

You will drive incident response, threat hunting, and SOC maturity improvements in a high-availability setting, coordinating with stakeholders to ensure timely remediation and secure operations.

Qualifications

• 8+ years of IT security operations or information security experience.
• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or related field.
• Mandatory certifications: TCNP, TCSC, Qualys VMDR Specialist, Qualys WAS Specialist.
• Preferred certifications: CEH, Microsoft SC-200, OSCP.

Responsibilities

• Security Monitoring & Incident Response: Investigate security incidents and provide advanced technical support for detection and response across SIEM/XDR/EDR, NDR, OT, and cloud platforms.
• Detection Engineering & Use Case Management: Develop and tune SIEM/XDR correlation rules aligned with MITRE ATT&CK; onboard log sources and normalize data.
• Vulnerability Management: Lead the full lifecycle from discovery to remediation validation; prioritize based on CVSS and asset criticality.
• Threat Hunting & Intelligence Integration: Proactive threat hunting; integrate threat intel feeds into SIEM/XDR platforms; track TTPs.
• Reporting & Stakeholder Management: Track vulnerabilities and SLA breaches; prepare executive risk reports and audit-ready documentation.

Skills

SIEM

XDR/EDR

NDR

Threat Hunting

Incident Response

MITRE ATT&CK

Log Correlation

Education

Bachelor's degree in Cybersecurity

Tools

Tenable

Qualys

Rapid7

Burp Suite

Acunetix

Job description

Management Solutions International (MSI) - Qatar, Doha is recruiting a Senior SOC Engineer to lead security monitoring, threat detection and vulnerability management across enterprise IT, OT, and cloud environments.

You will drive incident response, threat hunting, and SOC maturity improvements in a high-availability setting, coordinating with stakeholders to ensure timely remediation and secure operations.