SOC Security Controls & Incident Response Engineer

Commercial Bank; Doha; On-site; QAR 180,000 - 300,000; Full time

Benefits offered by this job

Competitive compensation

Work-life balance

Global partnerships & exposure

Job summary

Commercial Bank Of Qatar is seeking a Security Controls & Incident Response Engineer to lead detection, investigation, containment, and recovery activities. The role ensures controls are designed, operating, and continuously improved to mitigate risk in the enterprise.

You will collaborate with IT and business teams, map controls to MITRE ATT&CK techniques, and support audits and regulatory reviews. Strong experience in SOC, incident response, and control management is required.

Qualifications

• Degree in Computer Engineering, Computer Science, or equivalent.
• 5-8 years in SOC / Incident Response / Control Management or Assurance roles.
• Experience withISO 27001 and NIST frameworks.

Responsibilities

• Execute and monitor security controls (detective, preventive, corrective) across the SOC.
• Lead/incidence detection, investigation, containment, recovery, and post-incident reviews.
• Map controls to MITRE ATT&CK techniques and ensure alignment with governance.
• Collaborate with SIEM engineering to improve detection use-cases and reduce false positives.
• Produce reports on control effectiveness, incident trends, and risk exposure.

Skills

5-8 years experience

SOC / Incident Response

Control Management/Assurance

Education

Degree in Computer Engineering or Computer Science

Tools

SIEM

SOAR

MITRE ATT&CK

Job description

Commercial Bank Of Qatar is seeking a Security Controls & Incident Response Engineer to lead detection, investigation, containment, and recovery activities. The role ensures controls are designed, operating, and continuously improved to mitigate risk in the enterprise.

You will collaborate with IT and business teams, map controls to MITRE ATT&CK techniques, and support audits and regulatory reviews. Strong experience in SOC, incident response, and control management is required.