SECURITY OPERATIONS CENTER (SOC) ANALYST

Madre Me; Doha; On-site; QAR 156,000 - 246,000; Full time

Job summary

Madre Integrated Engineering in Doha is seeking a Security Operations Center (SOC) Analyst to monitor security alerts, investigate incidents, and support containment and recovery activities.

You will analyze logs from firewalls, endpoints, servers and network devices, tune SIEM rules, and coordinate with infrastructure and cybersecurity teams in a 24/7 SOC environment.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related discipline.
• Minimum 5 years of relevant experience in SOC operations or cybersecurity monitoring.
• Hands-on experience with SIEM, EDR, IDS/IPS, SOAR, and threat-intelligence platforms.
• Strong knowledge of incident detection, investigation, response, and escalation procedures.
• Familiarity with TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, and common network protocols.

Responsibilities

• Continuously monitor security alerts and events through SIEM and other monitoring platforms.
• Analyse and investigate suspicious activities, security incidents, and potential cyber threats.
• Perform initial containment and support incident-response and recovery activities.
• Analyse logs from firewalls, endpoints, servers, applications, and network devices.
• Conduct threat hunting and identify indicators of compromise.
• Maintain incident records, investigation findings, and shift-handover reports.
• Fine-tune SIEM rules, alerts, dashboards, and use cases to reduce false positives.
• Coordinate with infrastructure, network, application, and cybersecurity teams during investigations.

Skills

Analytical skills

Documentation skills

Communication skills

SOC operations

Education

Bachelor’s degree in Cybersecurity, IT, CS or related

Tools

SIEM

EDR

IDS/IPS

SOAR

Threat intelligence

Job description

Madre Integrated Engineering | Full time

SECURITY OPERATIONS CENTER (SOC) ANALYST

SECURITY OPERATIONS CENTER (SOC) ANALYST

Responsibilities

• Continuously monitor security alerts and events through SIEM and other monitoring platforms.
  
• Analyse and investigate suspicious activities, security incidents, and potential cyber threats.
  
• Classify, prioritise, and escal…
  
• Perform initial containment and support incident-response and recovery activities.
  
• Analyse logs from firewalls, endpoints, servers, applications, and network devices.
  
• Conduct threat hunting and identify indicators of compromise.
  
• Maintain incident records, investigation findings, and shift-handover reports.
  
• Fine-tune SIEM rules, alerts, dashboards, and use cases to reduce false positives.
  
• Coordinate with infrastructure, network, application, and cybersecurity teams during investigations.
  
• Stay updated on emerging threats, vulnerabilities, and attack techniques.
  

Requirements

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related discipline.
  
• Minimum 5 years of relevant experience in SOC operations or cybersecurity monitoring.
  
• Hands-on experience with SIEM, EDR, IDS/IPS, SOAR, and threat-intelligence platforms.
  
• Strong knowledge of incident detection, investigation, response, and escalation procedures.
  
• Good understanding of TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, and common network protocols.
  
• Familiarity with malware analysis, phishing investigations, threat hunting, and log analysis.
  
• Willingness to work rotational shifts in a 24/7 SOC environment, if required.
  
• Certifications such as CompTIA Security+, CySA+, CEH, GCIH, or equivalent are preferred.
  
• Strong analytical, documentation, and communication skills.
  
• .