Security Infrastructure Engineer: SIEM & SOAR Automation

Qatar Advanced Technology; Qatar; On-site; QAR 112,000 - 145,000; Full time

Job summary

Qatar Advanced Technology in QA is seeking a Security Infrastructure Engineer – Sentinel to support enterprise security infrastructure, SIEM/SOAR operations, and data ingestion.

The role requires hands-on experience with Google SecOps, Splunk or Sentinel, and strong scripting in Python. It is a full-time, on-site position in Qatar, offering opportunities for career growth and exposure to cloud and on-premises environments.

Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity. SIEM certs are an advantage.

Responsibilities

• Architect telemetry ingestion from GCP, AWS, Azure and on‑premises
• Develop parsers for UDM normalization
• Monitor ingestion rates, latency, data quality and drops
• Design and develop SOAR playbooks with Python and visual tools
• Build API integrations with Firewalls, EDR, IAM and Ticketing systems
• Configure RBAC and threat intel integrations
• Tune YARA/YARA-L rules with SOC teams
• Automate incident response, enrichment and containment
• Collaborate with Cloud, Infra and Network teams to troubleshoot ingestion

Skills

Google SecOps

Python scripting

API integration

SQL

Regex/log parsing

Git

Terraform

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

SIEM certification (preferred)

Tools

Splunk SIEM

Microsoft Sentinel

QRadar

Chronicle/Google SecOps

GCP

AWS

Azure

BigQuery

YARA/YARA-L

Docker

Kubernetes

Terraform

JSON

Protobuf

Job description

Qatar Advanced Technology in QA is seeking a Security Infrastructure Engineer – Sentinel to support enterprise security infrastructure, SIEM/SOAR operations, and data ingestion.

The role requires hands-on experience with Google SecOps, Splunk or Sentinel, and strong scripting in Python. It is a full-time, on-site position in Qatar, offering opportunities for career growth and exposure to cloud and on-premises environments.