Senior OT Security Engineer — ICS Threat Hunting

Black & Grey | People Advisory, Executive Search & Employer Branding; Doha; On-site; QAR 240,000 - 420,000; Full time

Job summary

Black & Grey HR is recruiting for an established technology solutions and services provider in Doha, Qatar. We seek an experienced Senior SOC Engineer – OT Security to lead monitoring, threat detection, incident response, and threat hunting across OT/ICS environments to protect mission-critical industrial operations.

The role requires 8+ years in cybersecurity with OT/ICS expertise and certifications such as GICSP, ISA/IEC 62443, GRID, or IACS.

Qualifications

• 8+ years of experience in cybersecurity, SOC operations, OT security, ICS security, or information security.
• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or a related field.
• Mandatory certification – any one: GICSP, ISA/IEC 62443, GRID or IACS.

Responsibilities

• Lead security monitoring, threat detection, incident response, and threat hunting across OT/ICS environments.
• Develop OT-specific detection rules; align use cases with MITRE ATT&CK for ICs.
• Maintain OT asset visibility and support network segmentation in Purdue Model contexts.
• Collaborate with OT engineering to implement containment actions safely in live environments.
• Prepare security reports, dashboards, and compliance evidence for stakeholders.

Skills

OT/ICS security

SOC operations

Threat hunting

Incident response

MITRE ATT&CK for ICs

Nozomi

Forescout

Microsoft Sentinel

OT network segmentation

Education

Bachelor’s degree in Cybersecurity / Information Security / Computer Science

Tools

Nozomi

Forescout

Microsoft Sentinel

SIEM platforms

Job description

Black & Grey HR is recruiting for an established technology solutions and services provider in Doha, Qatar. We seek an experienced Senior SOC Engineer – OT Security to lead monitoring, threat detection, incident response, and threat hunting across OT/ICS environments to protect mission-critical industrial operations.

The role requires 8+ years in cybersecurity with OT/ICS expertise and certifications such as GICSP, ISA/IEC 62443, GRID, or IACS.