Security Operations Engineer

Commercial Bank; Doha; On-site; QAR 180,000 - 260,000; Full time

Job summary

Commercial Bank Of Qatar seeks a Security Controls & Incident Response Engineer to ensure the effectiveness of security controls and to lead incident detection, investigation, and response activities in Doha, Qatar.

The role requires owning the execution of detective and corrective controls, driving the incident response lifecycle, and ensuring controls are designed, operated, and continuously improved in line with ISO 27001, NIST, and regulatory standards.

Qualifications

• Required Qualifications: Degree in Computer Engineering, Computer Science, or equivalent.
• 5-8 years in SOC / Incident Response / Control Management or Assurance roles.

Responsibilities

• Own execution and validation of detective and corrective controls across the SOC.
• Lead or support the full Incident Response Lifecycle (detect - respond - recover).
• Ensure controls are designed, operating, and continuously improved; align with ISO 27001, NIST, etc.
• Coordinate with IT and business teams for remediation and recovery.

Skills

SOC operations

Incident response

Control management

MITRE ATT&CK mapping

Education

Degree in Computer Engineering or Computer Science

Tools

SIEM

SOAR

Job description

About Commercial Bank Of Qatar

Commercial Bank, founded in 1975 and headquartered in Doha, plays a vital role in Qatar's economic development by offering a range of personal, business, government, international and investment services.

We believe in empowering our employees, providing them with opportunities for growth and professional development.

By Joining us, you'll be part of a workplace culture that fosters innovation, supports work-life balance, and encourages you to reach your full potential.

Join us in shaping the future of banking!

Job Summary

The Security Controls & Incident Response Engineer is responsible for ensuring the effectiveness of security controls and leading incident detection, investigation, and response activities.

This Role Bridges Control Governance And Operational Defence By

• Owning execution and validation of detective and corrective controls
• Driving incident response lifecycle (detect - respond - recover)
• Ensuring controls are designed, operating, and continuously improved

The role ensures that security controls effectively mitigate risk and perform as expected during real incidents, aligning with enterprise control frameworks and incident management practices.

Responsibilities

Security Controls Management

• Execute and monitor security controls (detective, preventive, corrective) across the SOC
• Validate that controls are: Properly implemented, operating effectively and producing measurable evidence
• Perform control testing and effectiveness reviews
• Support RCSA activities, including control documentation and assessment
• Identify gaps in control coverage and recommend improvements
• Ensure controls align with regulatory and internal frameworks (ISO 27001, NIST, etc.)

Incident Detection & Response

• Lead Or Support The Full Incident Response Lifecycle
• Detection and alert validation
• Investigation and analysis
• Containment and eradication
• Recovery and post-incident review
• Execute containment actions (e.g., endpoint isolation, account suspension, blocking IOCs)
• Perform root cause analysis and incident scoping
• Ensure timely escalation and communication of critical incidents
• Coordinate with IT and business teams for remediation and recovery

Control Effectiveness Through Incidents

• Validate that security controls perform correctly during incidents
• Identify control failures or weaknesses exposed during incidents
• Ensure controls are properly reflected in monitoring systems
• Contribute to mapping controls to MITRE ATT&CK techniques

Detection & Monitoring Alignment

• Work with SIEM engineering team to validate use-cases and improve detection quality
• Provide feedback on false positives, detection gaps and improvements
• Assist in refining correlation rules and thresholds
• Escalate complex incidents to senior engineers

Automation & Response Enablement

• Execute and support automated response workflows (SOAR)
• Identify opportunities to automate
• Ensure repeatable and scalable response processes

Governance, Reporting & Compliance

• Maintain documentation for: Controls, Incidents, Response procedures
• Produce reports on: Control effectiveness, incident trends, risk exposures
• Support audit, regulatory reviews, and control assurance activities

Requirements

• Required Qualifications: Degree in Computer Engineering, Computer Science, or equivalent
• Required Experience: 5-8 years in SOC / Incident Response / Control Management or Assurance roles

Why Commercial Bank?

• Best Digital Bank in the Middle East 2024 by World Finance and Best Mobile Banking App in the Middle East 2024 by Global Finance.
• An Innovation-Driven, Digital-First Environment where employees work with the latest tools and technologies to redefine banking
• Opportunities for Global Partnerships & International Exposure, connecting employees with global networks and perspectives.
• A focus on Employee Well-being & Work-Life Balance, ensuring a healthy and supportive environment for all team members
• Competitive Compensation & Benefits that ensure our employees are rewarded for their dedication and performance
• A strong Commitment to Diversity, Equity & Inclusion, fostering a culture that values every individual's unique perspective.

At Commercial Bank, we don't just offer careers, We shape futures by pioneering digital transformation in Qatar's banking sector, blending digital-first approach to redefine banking through innovative solutions.

Disclaimer

We appreciate your interest in joining CBQ! Please note that only selected candidates will be contacted for further steps in the hiring process. This job posting is for informational purposes only, and CBQ reserves the right to modify, withdraw, or close it at any time without notice.