Senior Security Operations Centre Analyst (L3)

Alftek International; Doha; On-site; QAR 200,000 - 320,000; Full time

Job summary

Alftek International in Doha, Qatar, seeks a Senior Security Operations Centre Analyst (Level 3) to monitor and investigate security threats, conduct proactive threat hunting, and lead incident response in collaboration with SIEM, CTI and EDR partners.

The role requires a CISSP, CISM or CISA certification, a bachelor’s degree in a related field, and at least 6 years of experience in Qatar within a major bank or equivalent environment. Based in Doha with potential travel.

Qualifications

• Professional security certifications (CISSP, CISM or CISA) are mandatory.
• Bachelor’s degree in computer science, computer engineering or related field.
• Minimum 6 years of current experience in Qatar within a major bank.
• SIEM certification and vendor security certifications related to network, application or systems security are a plus.

Responsibilities

• Analyse IDS alerts, network traffic, logs and host activity across technologies and platforms.
• Validate and triage security events and SIEM/CTI/EDR alerts and incidents, determining follow-up actions.

Education

CISSP

CISM

CISA

Bachelor's degree in Computer Science / Computer Engineering

Tools

SIEM

EDR

CTI

Job description

Location: Doha, Qatar Full-Time

We are seeking a Senior Security Operations Centre Analyst (Level 3) in Doha, Qatar to join an internal Security Operations team. The role monitors and investigates security threats and risks, conducts proactive threat hunting using current security technology and plays a leading role in incident response, working closely with SIEM, CTI and EDR service partners to validate alerts and incidents and improve service quality. A professional security certification such as CISSP, CISM or CISA and a minimum of 6 years of current experience in Qatar within a major bank are mandatory for this position.

Key Responsibilities

• Analyse IDS alerts, network traffic, logs and host activity across technologies and platforms

• Validate and triage security events and SIEM, CTI and EDR partner alerts and incidents, confirming accuracy, relevance and severity, distinguishing false positives and determining follow-up actions

• Provide structured feedback on partner service quality, addressing false positives, analysis gaps and escalation timeliness to improve service performance and detection effectiveness

• Conduct proactive threat hunting using specialist Endpoint Detection and Response tools

• Initiate and track investigations through resolution, guiding incident responders and performing host triage and retrieval, malware and remote system analysis, end-user interviews and remediation

• Prepare security alert notifications and detailed investigation and analysis reports for internal SOC use and management reporting

• Assess existing technical capabilities and systems, research and test new security tools and products, and recommend improvements for SOC implementation

• Collaborate with the Engineering team to tune and configure devices

• Regularly review operating procedures, protocols and completed activities to capture lessons learned and best practices and ensure SOC effectiveness against operational requirements

• Work with the management team to improve SOC processes and monitoring services through innovation and operational change

• Maintain confidentiality of commercially sensitive information

Knowledge & Development

• Understand business processes and controls across all relevant operational areas

• Coordinate activities using expert knowledge of information security issues and best practices, supported by a working knowledge of IT systems

• Stay current on vulnerabilities, attacks, evolving internet threats and countermeasures to protect the organisation s network

• Share knowledge with fellow analysts to develop solutions efficiently, and produce technical articles for the internal knowledge base

Mandatory Requirements

• Professional security certification such as CISSP, CISM or CISA

• Minimum 6 years of current experience in Qatar within a major bank; experience in a large corporate or MSSP in a similar L3 SOC analyst role is an advantage

• Bachelor s degree, preferably in computer science, computer engineering or a related subject

• SIEM certification and vendor security certifications related to network, application or systems security are a plus

Required Skills

• Coordinate or contribute to individual and team projects

• In-depth knowledge of security architectures and devices

• In-depth knowledge of using and managing threat intelligence

• In-depth knowledge of malware infection root causes and proactive mitigation

• Ability to mentor and coach less experienced analysts in advanced investigation techniques

• Excellent verbal and written communication skills, including explaining IT, networking and security concepts to personnel at all experience and responsibility levels

• Creative problem-solving skills and a desire to develop new processes

• Experience prioritising and managing multiple tasks in fast-paced, high-pressure environments, adapting to unplanned work and loosely defined requirements while maintaining attention to detail

Working Arrangement

• Based in Doha, Qatar, with visits to other domestic and overseas locations as and when required

Desired Candidate Profile

• Professional security certification such as CISSP, CISM or CISA

• Minimum 6 years of current experience in Qatar within a major bank; experience in a large corporate or MSSP in a similar L3 SOC analyst role is an advantage

• Bachelor s degree, presumably in computer science, computer engineering or a related subject

• SIEM certification and vendor security certifications related to network, application or systems security are a plus