Senior SOAR Engineer: Automation & Incident Response Lead

malomatia; Doha; On-site; QAR 200,000 - 350,000; Full time

Job summary

malomatia is seeking a seasoned SOAR Engineer in Doha to monitor, develop, and maintain cyber security automation across our MSSP/MDR services. You will drive incident response automation, platform administration, and content lifecycle management, collaborating with SOC and Security Engineering teams to deliver resilient security solutions.

The ideal candidate has 6+ years in SOAR ecosystems, strong API development skills, and experience integrating tools with ITSM systems.

Qualifications

• Bachelor's degree in Engineering, Economics, CS or related field.
• One or more SOAR certificates related to a SOAR platform.

Responsibilities

• Act as Technical Subject Matter Expert for Security Automation and Orchestration.
• Develop and execute procedures for SOAR platform administration.
• Design, deploy and maintain SOAR platforms, including content and lifecycle management.
• Collaborate with SOC and Security Engineering to improve automation.
• Improve SOC processes by integrating automation in SOAR tools.
• Implement automation and ensure compatibility with detection/response tools.
• Integrate new sources and build playbooks for incident triage and response.
• Develop scripts to automate detection and response workflows.
• Build pipelines to enrich logs and provide SOC analysts with comprehensive views.
• Operate and mature SOC playbooks, workflows and use cases.
• Assist with client onboarding and act as primary contact for MSSP/MDR clients.

Skills

SOAR technologies

API development

Incident Response

SOC processes

Dashboards & reports

OS internals

SOAR integrations

ITSM integrations

Problem solving

Communication

Education

Bachelor's degree in Engineering/CS/Economics

SOAR certificate

Tools

Palo Alto Cortex XSOAR

Splunk SOAR/Phantom

Microsoft Sentinel Automation/Logic Apps

IBM Resilient

Job description

malomatia is seeking a seasoned SOAR Engineer in Doha to monitor, develop, and maintain cyber security automation across our MSSP/MDR services. You will drive incident response automation, platform administration, and content lifecycle management, collaborating with SOC and Security Engineering teams to deliver resilient security solutions.

The ideal candidate has 6+ years in SOAR ecosystems, strong API development skills, and experience integrating tools with ITSM systems.