SOC Engineer: Threat Detection & Incident Response

Edison Smart®; Doha; On-site; QAR 60,000 - 120,000; Full time

Job summary

Edison Smart® in Doha is seeking a Security Operations Center professional to monitor SIEM, XDR/EDR, IDS/IPS, firewalls and cloud security alerts, and to triage incidents based on severity and business impact.

You will conduct in-depth investigations, analyze malware and attack techniques, coordinate containment and eradication, and support recovery, while documenting findings and coordinating with IT teams.

Qualifications

• 1–4 years of experience in a Security Operations Center (SOC)
• Experience in monitoring SIEM, EDR/XDR, IDS/IPS, firewalls, email security, and cloud security alerts
• Knowledge of alert triage, incident classification, escalation procedures, and ticket management
• Understanding of TCP/IP, DNS, HTTP/HTTPS, VPN, routing, switching, and common network protocols
• Knowledge of Windows and Linux administration, system logs, and endpoint security
• Familiarity with common cyber threats such as phishing, malware, ransomware, brute-force attacks, web attacks, and insider threats

Responsibilities

• Monitor SIEM, XDR, EDR, NDR, IDS/IPS, Firewall, and Cloud security alerts and triage based on severity and business impact.
• Perform in-depth investigations, analyze malware and attack techniques, identify root cause, coordinate containment and eradication, and support incident recovery.
• Review vulnerability scan results, track remediation status, validate patch completion, update incident tickets, and ensure SLA compliance.

Job description

Edison Smart® in Doha is seeking a Security Operations Center professional to monitor SIEM, XDR/EDR, IDS/IPS, firewalls and cloud security alerts, and to triage incidents based on severity and business impact.

You will conduct in-depth investigations, analyze malware and attack techniques, coordinate containment and eradication, and support recovery, while documenting findings and coordinating with IT teams.