Security Infrastructure Engineer – Microsoft Sentinel | Doha, Qatar

Uasmart; Doha; On-site; QAR 180,000 - 300,000; Full time

Job summary

WorkWavez Solutions Pvt. Ltd. in Doha, Qatar seeks a Security Infrastructure Engineer focused on Microsoft Sentinel to bolster security operations, threat detection, and automation.

The role demands hands-on Sentinel experience, strong KQL skills, and expertise in SIEM/SOAR, Azure security, and incident response. You will contribute to monitoring, threat hunting, automation, and investigation across Azure and hybrid environments, aligning with MITRE ATT&CK and leveraging Log Analytics for

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent.

Responsibilities

• Configure and maintain Microsoft Sentinel for security monitoring and threat detection.
• Develop KQL queries for log analytics and threat hunting.
• Manage Sentinel data connectors, CEF/Syslog, REST APIs, and custom log ingestion.
• Configure SIEM/SOAR workflows using Azure Logic Apps, automation rules, and playbooks.
• Develop analytics rules, hunting queries, workbooks, and watchlists.
• Support security integrations involving Microsoft Defender XDR, Entra ID, Microsoft 365, and Azure Security.
• Contribute to incident response and threat detection aligned with the MITRE ATT&CK framework.
• Support security monitoring across Azure cloud and hybrid infrastructure using Log Analytics.

Skills

KQL

Sentinel

Threat hunting

Incident response

Security monitoring

Education

Bachelor's degree in CS/IT/Cybersecurity

Microsoft Sentinel certification

Tools

Azure Logic Apps

Log Analytics

CEF/Syslog

REST APIs

Playbooks

Job description

Company: WorkWavez Solutions Pvt. Ltd.
Location: Doha, Qatar
Job Category: IT & Software, Cybersecurity
Experience Required: 3–5 years

Job Overview

WorkWavez Solutions Pvt. Ltd. is seeking a Security Infrastructure Engineer specializing in Microsoft Sentinel to support security operations, threat detection, and security automation.

The role requires hands-on production experience with Microsoft Sentinel, strong Kusto Query Language (KQL) skills, and expertise in SIEM/SOAR technologies, Azure security, incident response, and hybrid infrastructure. The successful candidate will contribute to security monitoring, threat hunting, automation, and incident investigation.

Key Responsibilities

Based on the listed skills and experience, the role involves:

• Configure and maintain Microsoft Sentinel for security monitoring and threat detection.
• Develop KQL queries for log parsing, analytics, and threat hunting.
• Manage Sentinel data connectors, CEF/Syslog, REST APIs, and custom log ingestion.
• Configure SIEM/SOAR workflows using Azure Logic Apps, automation rules, and playbooks.
• Develop and maintain analytics rules, hunting queries, workbooks, and watchlists.
• Support security integrations involving Microsoft Defender XDR, Microsoft Entra ID, Microsoft 365, and Azure Security.
• Contribute to incident response and threat detection aligned with the MITRE ATT&CK framework.
• Support security monitoring across Azure cloud and hybrid infrastructure using Log Analytics.

Requirements and Qualifications

• 3–5 years of experience in Security Engineering, SOC Automation, Security Operations, DevOps, or Infrastructure Security.
• Hands-on production experience with Microsoft Sentinel.
• Strong KQL skills for log parsing, analytics, and threat detection.
• Experience with Sentinel data connectors, CEF/Syslog, REST APIs, and custom log ingestion.
• Knowledge of SIEM/SOAR, Azure Logic Apps, automation rules, and playbooks.
• Experience with analytics rules, hunting queries, workbooks, and watchlists.
• Familiarity with Microsoft Defender XDR, Entra ID, Microsoft 365, and Azure Security.
• Knowledge of incident response, MITRE ATT&CK, and third-party security integrations.
• Experience with Azure Cloud, hybrid infrastructure, and Log Analytics.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent.
• Microsoft Sentinel SIEM certification is mandatory.

Preferred Certifications

• Microsoft SC-200
• CompTIA Security+
• CompTIA CySA+
• Certified Ethical Hacker (CEH)
• Certified Information Systems Security Professional (CISSP)
• GIAC Certified Incident Handler (GCIH)

Salary and Benefits

Salary, compensation, and employment benefits have not been specified in the original announcement.

Company: WorkWavez Solutions Pvt. Ltd.
Email
Location: Doha, Qatar