Senior Incident Response Lead: Cloud & Web App Security

Wipro; Doha; On-site; QAR 350,000 - 650,000; Full time

Job summary

Tanqeeb in Doha seeks an experienced Incident Response Specialist (L3) to lead detection, investigation, and remediation of complex security incidents, with strong expertise in Microsoft Sentinel, cloud security, and web-application threat remediation.

You will drive end-to-end incident response across Azure, AWS, and GCP, develop detection rules and automation in KQL, PowerShell, Python, and SOAR, and coordinate with SOC, Threat Intelligence, and DevOps teams.

Qualifications

• 8–10 years in cybersecurity with 3–4 years in Incident Response.
• Hands-on cloud security and forensics across Azure, AWS, GCP.
• Expertise with Microsoft Sentinel, KQL, and playbook development.
• Deep knowledge of web app security, HTTP traffic, and WAF logs.
• Proficient in PowerShell, Python, and SOAR automation.
• Strong analytical, problem-solving, and cross-functional communication.

Responsibilities

• Lead end-to-end response to cybersecurity incidents, including triage, containment, eradication, and recovery.
• Investigate and remediate Cloud Security incidents (IAM, misconfigurations, API abuse).
• Respond to and mitigate complex Web Application attacks (OWASP Top 10).
• Conduct threat hunting and forensic investigations across endpoints, networks, and multi-clouds.
• Design, develop, and optimize detection rules, analytics, and automated playbooks in Sentinel.
• Analyze and correlate events across SIEM, EDR, cloud logs, and network telemetry.
• Develop automation using KQL, PowerShell, Python, and SOAR technologies.
• Coordinate major incidents with SOC, Threat Intel, and DevOps; deliver executive briefings.
• Prepare incident reports, forensic findings, and remediation recommendations; ensure policy compliance.

Skills

Incident Response

Cloud Security

Forensics

Microsoft Sentinel

KQL

PowerShell

Python

SOAR

Threat Hunting

Executive Briefings

Tools

SIEM

EDR

CSPM

CloudTrail / Cloud logs

Azure Logs / AWS CloudTrail

Job description

Tanqeeb in Doha seeks an experienced Incident Response Specialist (L3) to lead detection, investigation, and remediation of complex security incidents, with strong expertise in Microsoft Sentinel, cloud security, and web-application threat remediation.

You will drive end-to-end incident response across Azure, AWS, and GCP, develop detection rules and automation in KQL, PowerShell, Python, and SOAR, and coordinate with SOC, Threat Intelligence, and DevOps teams.