Senior Cybersecurity Incident Response Lead Microsoft Stack

Employment; Doha; On-site; QAR 437,000 - 655,000; Full time

Job summary

Employment is seeking a Senior Cybersecurity Consultant to join our Cybersecurity Practice as an Incident Handler. You will lead detection, investigation, containment and recovery of security incidents across enterprise and cloud environments, with a strong focus on Microsoft Defender, Sentinel, Purview, and DLP.

You will collaborate with SOC analysts and IT operations to triage alerts, coordinate containment and eradication, and develop playbooks for proactive threat hunting across the

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 8+ years of experience in cybersecurity operations, incident response, or security monitoring with hands-on Microsoft security tools.
• Relevant professional certifications such as SC-200, SC-100, SC-400, GIAC/ISC2 are highly desirable.
• Strong hands-on experience with the Microsoft security stack and cloud/endpoint forensics.

Responsibilities

• Incident Handling & Response: lead end-to-end management of incidents per IR processes and SLAs.
• Operate and tune Microsoft Defender (EDR/XDR) across endpoints, identities, email, and cloud workloads.
• Use Microsoft Sentinel for log analysis, correlation, and automated response; develop rules and playbooks.
• Leverage Microsoft Purview and DLP to govern data and protect information assets.
• Threat hunting across Microsoft 365 and Azure; develop new detections and improve detection logic.
• Forensics: conduct host, endpoint, and cloud investigations and preserve evidence.
• Documentation: produce incident reports, timelines, and post-incident reviews; maintain runbooks.

Skills

Incident response

Threat hunting

Forensic analysis

Detections engineering

Education

Bachelor's in CS or Info Security

Tools

Microsoft Defender

Microsoft Sentinel

Microsoft Purview

DLP (Data Loss Prevention)

KQL

PowerShell

Entra ID

Active Directory

Job description

Employment is seeking a Senior Cybersecurity Consultant to join our Cybersecurity Practice as an Incident Handler. You will lead detection, investigation, containment and recovery of security incidents across enterprise and cloud environments, with a strong focus on Microsoft Defender, Sentinel, Purview, and DLP.

You will collaborate with SOC analysts and IT operations to triage alerts, coordinate containment and eradication, and develop playbooks for proactive threat hunting across the