Senior OT/ICS Cyber SOC Engineer

WorkWavez; Qatar; On-site; QAR 300,000 - 420,000; Full time

Job summary

WorkWavez in Doha, Qatar, seeks a Senior SOC Engineer – OT/ICS Cybersecurity to monitor and protect OT/ICS environments, including SCADA, DCS and PLC, from cyber threats. You will manage SIEM detection, investigate incidents, and support containment and recovery in industrial networks.

The role requires 5–8 years in OT/ICS cybersecurity, strong knowledge of industrial protocols, Purdue Model, OT DMZ, and Zero Trust approaches. Certifications and ongoing professional development are valued.

Qualifications

• Bachelor's degree or higher in a relevant field.
• 5–8 years of professional experience in OT/ICS cybersecurity.
• Hands-on experience securing SCADA, DCS and PLC environments.
• Experience with SIEM administration and detection-rule tuning.

Responsibilities

• Monitor OT/ICS environments including SCADA, DCS, and PLC systems for cybersecurity threats and anomalies.
• Administer SIEM platforms and tune detection rules to improve threat identification.
• Operate Microsoft Sentinel or equivalent SIEM technologies.
• Utilize OT security platforms such as Nozomi and Forescout.
• Investigate and respond to OT cybersecurity incidents.
• Perform incident containment and support service restoration activities.
• Conduct OT threat hunting and anomaly detection.
• Apply the Purdue Model to OT network security architecture.
• Design and maintain OT DMZ and network segmentation strategies.
• Support micro-segmentation and Zero Trust security approaches for OT environments.
• Perform packet analysis and Deep Packet Inspection.
• Work with packet brokers and TAP/SPAN technologies.
• Analyze industrial protocols including Modbus, DNP3, OPC-UA, IEC 104, and Ethernet/IP.
• Maintain OT asset visibility and support vulnerability-management activities.
• Apply MITRE ATT&CK for ICS techniques to threat detection and security analysis.
• Support compliance with IEC 62443 and NIST ICs cybersecurity requirements.

Skills

OT/ICS cybersecurity

SIEM administration

Threat hunting

Incident response

Purdue Model

Industrial protocols

Zero Trust OT

MITRE ATT&CK for ICS

SCADA/DCS/PLC security

OT asset visibility

Education

Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related field

Tools

Microsoft Sentinel

Nozomi

Forescout

Job description

WorkWavez in Doha, Qatar, seeks a Senior SOC Engineer – OT/ICS Cybersecurity to monitor and protect OT/ICS environments, including SCADA, DCS and PLC, from cyber threats. You will manage SIEM detection, investigate incidents, and support containment and recovery in industrial networks.

The role requires 5–8 years in OT/ICS cybersecurity, strong knowledge of industrial protocols, Purdue Model, OT DMZ, and Zero Trust approaches. Certifications and ongoing professional development are valued.