SOC Engineer

Experience; Doha; On-site; QAR 100,000 - 167,000; Full time

Job summary

Management Solutions International (MSI) Doha is seeking a Security Operations Center (SOC) professional to monitor and triage security alerts, perform incident investigations, and support threat hunting activities. The role emphasizes collaboration with IT teams and rapid containment of threats.

The ideal candidate will have 1–4 years in SOC, hands-on SIEM/EDR/XDR experience, and familiarity with network protocols and cloud security.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS or related field is required.
• 1-4 years of SOC experience preferred or relevant security operations exposure.
• Experience monitoring SIEM/EDR/XDR, IDS/IPS, firewalls, email security and cloud security alerts.

Responsibilities

• Monitor security events and triage incidents based on severity and business impact.
• Lead incident response, investigation, containment, and recovery actions.

Skills

SIEM

EDR/XDR

IDS/IPS

Firewalls

Cloud security

Log analysis

Powershell

Python

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Windows Admin

Linux Admin

Job description

Industry Information Technology and Services

• Security Monitoring & Incident Detection Monitor SIEM, XDR, EDR, NDR, IDS/IPS, Firewall, and Cloud security alerts. Identify, validate, triage, and prioritize security incidents based on severity and business impact.
• Incident Response & Threat Investigation Perform in-depth investigations, analyze malware and attack techniques, identify root cause, coordinate containment and eradication, and support incident recovery.
• Detection Engineering & Threat Hunting Execute scheduled threat hunting queries, monitor hunting dashboards, validate suspicious activities, and report findings.
• Vulnerability & Security Operations Support Review vulnerability scan results, track remediation status, validate patch completion, and update tickets.
• Reporting & Continuous Improvement Update incident tickets, maintain shift handover notes, prepare daily operational reports, and ensure SLA compliance.

Desired Candidate Profile

• Necessary Knowledge and Experience to be able to do the Job 1-4 years of experience in a Security Operations Center (SOC)
• Experience in monitoring SIEM, EDR/XDR, IDS/IPS, firewalls, email security, and cloud security alerts.
• Knowledge of alert triage, incident classification, escalation procedures, and ticket management.
• Understanding of TCP/IP, DNS, HTTP/HTTPS, VPN, routing, switching, and common network protocols.
• Knowledge of Windows and Linux administration, system logs, and endpoint security.
• Familiarity with common cyber threats such as phishing, malware, ransomware, brute-force attacks, web attacks, and insider threats
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Ability to document incidents clearly, communicate effectively, and coordinate with internal teams during security incidents.
• Basic knowledge of PowerShell, Python, or Bash for automation and log analysis is an advantage.
• Ability to analyze logs from endpoints, servers, firewalls, proxies, Active Directory, cloud platforms, and security devices.

Added advantages CHFI , DFIR Foundations

Management Solutions International (MSI) - Qatar, Doha