SOC L3 / Team Lead | HyperThink Systems | Qatar

HyperThink Systems; Qatar; On-site; QAR 350,000 - 550,000; Full time

Job summary

HyperThink Systems in Qatar seeks an experienced SOC L3 / Team Lead for a 12‑month extendable contract to drive advanced incident escalation and SOC operations across enterprise environments.

You will lead investigations, mentor security engineers, and guide cross-functional teams using Splunk SIEM, MITRE ATT&CK, and threat intelligence to strengthen cyber resilience.

Qualifications

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Technology, or a related technical discipline.
• Minimum of 9 to 12 years of progressive professional experience in cybersecurity operations, incident response, and SOC leadership.
• Strong hands-on expertise in Splunk SIEM architecture, advanced threat detection, and log analytics.
• Experience in incident escalation protocols, SOC operations, and team leadership.
• Experience conducting digital forensics, malware analysis, and enterprise threat hunting.
• Knowledge of security frameworks, regulatory compliance, and risk management.

Responsibilities

• Spearhead Tier-3 incident escalation and complex root-cause forensics.
• Direct daily SOC activities, team leadership, shift scheduling, and performance metrics.
• Architect and optimize Splunk SIEM deployments and threat detection pipelines.
• Establish incident response playbooks, escalation procedures, and automated remediation workflows.
• Partner with executives, IT governance, and compliance teams to align security with business goals.
• Mentor and evaluate junior analysts to foster growth and excellence.
• Conduct post-incident reviews and executive briefings, with root-cause analysis reporting.
• Maintain audit-ready documentation and security baselines across SOC functions.

Skills

Incident escalation

SOC leadership

Threat detection

Digital forensics

Executive communications

Education

Bachelor's or Master's in CS/ cybersecurity/ IT

Tools

Splunk SIEM

Job description

Position Summary

Driving advanced incident escalation, strategic security operations leadership, and executive threat management across enterprise environments, HyperThink Systems is actively seeking an accomplished SOC L3 / Team Lead for a 12-month extendable contract engagement in Qatar. In this vital technical leadership role, you will spearhead complex incident investigations, direct SOC operations, and mentor security engineering squads. Bringing 9 to 12 years of progressive professional experience in cybersecurity operations and SIEM architecture, you will empower enterprise clients to achieve uncompromised cyber resilience. This prestigious career opportunity offers competitive remuneration, high executive visibility, and exceptional professional growth within a premier technology solutions enterprise.

Detailed Job Description

As a SOC L3 / Team Lead supporting HyperThink Systems in Qatar, you will take full operational, architectural, and tactical ownership of elite incident escalation, SOC team leadership, and enterprise security posture optimization. Your day-to-day responsibilities include leading complex incident investigations, driving SOC operational strategies, managing shift rosters, and collaborating with executive stakeholders during critical cybersecurity events. You will leverage deep expertise in Splunk SIEM architecture, advanced threat intelligence, and MITRE ATT&CK frameworks to guide cross-functional security engineering squads.

Key Responsibilities

• Spearhead elite Tier-3 incident escalation, complex root-cause forensics, and enterprise-wide cybersecurity crisis management.
• Direct daily Security Operations Center (SOC) activities, team leadership, shift scheduling, and operational performance metrics.
• Architect and optimize enterprise-grade Splunk SIEM deployments, advanced threat detection pipelines, and log aggregation strategies.
• Establish robust incident response playbooks, escalation procedures, and automated remediation workflows.
• Partner with executive leadership, IT governance, and compliance squads to align security operations with business objectives.
• Mentor, train, and evaluate Tier-1 and Tier-2 security analysts to foster professional growth and technical excellence.
• Conduct comprehensive post-incident reviews, executive briefings, and root-cause analysis reporting.
• Maintain rigorous compliance standards, security baselines, and audit-ready documentation across all SOC functions.

Required Qualifications & Skills

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Technology, or a related technical discipline.
• Minimum of 9 to 12 years of progressive professional experience in cybersecurity operations, incident response, and SOC leadership.
• Strong, demonstrable hands-on professional expertise in Splunk SIEM architecture, advanced threat detection, and log analytics.
• Comprehensive working knowledge and practical proficiency in incident escalation protocols, SOC operations, and team leadership.
• Deep practical experience conducting advanced digital forensics, malware analysis, and enterprise threat hunting.
• Solid practical grasp of security frameworks, regulatory compliance standards, and risk management principles.
• Proven ability to lead cross-functional technical squads and communicate effectively with executive stakeholders.
• Mandatory legal work eligibility and physical availability for professional operations in Qatar.

Nice-to-Have Skills

• Advanced professional security certifications such as CISSP, CISM, GCIH, GCFA, or OSCP.
• Prior professional working experience in top-tier global security consulting firms, financial institutions, or government agencies.
• Hands-on familiarity with SOAR platforms (Splunk SOAR, XSOAR) and cloud security posture management (CSPM).
• Experience utilizing Python or Go for developing custom security automation tools and API integrations.
• Exposure to agile project management methodologies and enterprise IT service management ticketing platforms (ServiceNow, Jira).

Application Information

• Salary/Rate: Market Competitive / Enterprise Qatar Security Leadership Package
• Deadline: Open until filled (Urgent Qatar SOC Team Lead Opening)
• Notice Period: Immediate to 30 Days Preferred
• Contract Duration: 12 Months Contract (Extendable)