Senior SOC Engineer: Threat Detection & Incident Response

Edison Smart®; Doha; On-site; QAR 201,000 - 223,000; Full time

Job summary

Edison Smart seeks a Security Operations Center (SOC) professional to join the Doha team. The role focuses on monitoring SIEM, EDR/XDR, IDS/IPS, firewalls, email security, and cloud alerts to identify and prioritize incidents.

You will conduct in-depth investigations, analyze malware techniques, and coordinate containment and recovery efforts while supporting vulnerability reviews and continuous improvement initiatives.

Qualifications

• 1–4 years of experience in a Security Operations Center (SOC).
• Experience monitoring SIEM, EDR/XDR, IDS/IPS, firewalls, email security, and cloud security alerts.
• Knowledge of alert triage, incident classification, escalation procedures, and ticket management.
• Understanding of TCP/IP, DNS, HTTP/HTTPS, VPN, routing, switching, and common network protocols.
• Knowledge of Windows and Linux administration, system logs, and endpoint security.
• Familiarity with common cyber threats such as phishing, malware, ransomware, brute-force attacks, web attacks, and insider threats.

Responsibilities

• Monitor SIEM, XDR, EDR, NDR, IDS/IPS, Firewall, and Cloud security alerts.
• Identify, validate, triage, and prioritize security incidents based on severity and business impact.
• Perform in-depth investigations, analyze malware and attack techniques, identify root cause, coordinate containment and eradication, and support incident recovery.
• Execute scheduled threat hunting queries, monitor hunting dashboards, validate suspicious activities, and report findings.
• Review vulnerability scan results, track remediation status, validate patch completion, and update tickets.
• Update incident tickets, maintain shift handover notes, prepare daily operational reports, and ensure SLA compliance.

Skills

SIEM monitoring

EDR/XDR

IDS/IPS

Firewall security

Cloud security alerts

Education

Bachelor's degree in Cybersecurity / IT / CS

CompTIA Security+

CompTIA CySA+

EC-Council CND

Cisco Cyber Ops Associate

Microsoft SC-200

CHFI / DFIR Foundations (advantage)

Tools

PowerShell

Python

Bash

Job description

Edison Smart seeks a Security Operations Center (SOC) professional to join the Doha team. The role focuses on monitoring SIEM, EDR/XDR, IDS/IPS, firewalls, email security, and cloud alerts to identify and prioritize incidents.

You will conduct in-depth investigations, analyze malware techniques, and coordinate containment and recovery efforts while supporting vulnerability reviews and continuous improvement initiatives.