Security Infrastructure Engineer - Sentinel at Qatar Advanced Technology

Qatar Advanced Technology; Qatar; On-site; QAR 112,000 - 145,000; Full time

Job summary

Qatar Advanced Technology in QA is seeking a Security Infrastructure Engineer – Sentinel to support enterprise security infrastructure, SIEM/SOAR operations, and data ingestion.

The role requires hands-on experience with Google SecOps, Splunk or Sentinel, and strong scripting in Python. It is a full-time, on-site position in Qatar, offering opportunities for career growth and exposure to cloud and on-premises environments.

Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity. SIEM certs are an advantage.

Responsibilities

• Architect telemetry ingestion from GCP, AWS, Azure and on‑premises
• Develop parsers for UDM normalization
• Monitor ingestion rates, latency, data quality and drops
• Design and develop SOAR playbooks with Python and visual tools
• Build API integrations with Firewalls, EDR, IAM and Ticketing systems
• Configure RBAC and threat intel integrations
• Tune YARA/YARA-L rules with SOC teams
• Automate incident response, enrichment and containment
• Collaborate with Cloud, Infra and Network teams to troubleshoot ingestion

Skills

Google SecOps

Python scripting

API integration

SQL

Regex/log parsing

Git

Terraform

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

SIEM certification (preferred)

Tools

Splunk SIEM

Microsoft Sentinel

QRadar

Chronicle/Google SecOps

GCP

AWS

Azure

BigQuery

YARA/YARA-L

Docker

Kubernetes

Terraform

JSON

Protobuf

Job description

Apply for Security Infrastructure Engineer - Sentinel at Qatar Advanced Technology in QA. This Full time on site position offers great opportunities for career growth.

WE ARE HIRING – Security Infrastructure Engineer – Sentinel Location: Qatar Experience: 3–5 Years Focus: Google SecOps | SIEM | SOAR | Security Automation

We are looking for an experienced Security Infrastructure Engineer – Sentinel to join our team and support enterprise security infrastructure, SIEM/SOAR operations, security automation, and security data ingestion.

Key Responsibilities

• Architect and manage telemetry ingestion from GCP, AWS, Azure & on-premises environments
• Develop and troubleshoot custom parsers for UDM normalization
• Monitor ingestion rates, latency, data quality, and data drops
• Design and develop SOAR playbooks using Python and visual workflow builders
• Build API integrations with Firewalls, EDR, IAM & Ticketing systems
• Configure RBAC, threat intelligence integrations, and case management workflows
• Tune YARA/YARA-L rules in collaboration with SOC teams
• Automate incident response, enrichment, evidence gathering, and containment activities
• Collaborate with Cloud, Infrastructure, and Network teams to troubleshoot connectivity and ingestion issues

Required Skills

• Google SecOps / Chronicle – Mandatory
• 1–2+ years of hands-on Google SecOps experience
• Strong SIEM/SOAR experience – Splunk, Microsoft Sentinel, QRadar, etc.
• Advanced Python scripting and API integration
• Hands-on GCP experience – IAM, Cloud Logging, VPC Service Controls
• SQL / BigQuery, YARA/YARA-L & Bash
• Knowledge of MITRE ATT&CK & NIST Cybersecurity Framework
• Git, Terraform, Docker/Kubernetes
• Strong knowledge of JSON, Protobuf, Regex & log parsing

Qualifications

Bachelor’s degree in Computer Science, IT, Cybersecurity, or equivalent SIEM certification preferred Security+, CySA+, CEH, CISSP, or GCIH are an advantage

Pay: QAR10,000.00 - QAR13,000.00 per month Work Location: In person