System Security Engineer

Strategic Aerospace Services WLL; Doha; On-site; QAR 400,000 - 600,000; Full time

Job summary

A leading aerospace service provider is looking for a highly skilled System Security Engineer to enhance cybersecurity across on-premise and hybrid environments. The ideal candidate will have a strong background in Windows infrastructure security and identity management. Key responsibilities include managing security solutions and compliance efforts, with a focus on ensuring the protection and resilience of IT systems.

Qualifications

• Bachelor’s degree in Information Security or related field required.
• 5+ years of experience in Windows infrastructure security is essential.
• Strong knowledge of compliance frameworks such as ISO 27001, NIST, and CIS Controls.

Responsibilities

• Design and implement security solutions across Active Directory and Exchange environments.
• Automate security tasks and perform system audits using scripting tools.
• Integrate security logs into SIEM platforms to support threat detection.

Skills

Security Architecture

Scripting (PowerShell)

Threat Detection

Identity and Access Management

Compliance Knowledge

Problem-Solving

Communication Skills

Education

Bachelor’s degree in Information Security or Computer Engineering

Master’s degree in Information Security or Computer Engineering

Tools

Windows Security Tools

SIEM Solutions

PowerShell

WSUS/SCCM

Job description

We are seeking a highly skilled System Security Engineer to strengthen our cybersecurity posture across on-premise and hybrid environments. The ideal candidate will have a strong background in Windows infrastructure security, identity and access management, scripting, and compliance frameworks. This role is critical to ensuring the protection, integrity, and resilience of our IT systems, while supporting secure business operations and digital transformation initiatives.

Key Responsibilities:

• Design, implement, and manage security solutions across Active Directory, ADFS, and Exchange (on-premise and hybrid).
  
• Harden and secure endpoints, infrastructure, and communications systems against evolving cyber threats.
  
• Automate security tasks and perform system audits using PowerShell and other scripting tools.
  
• Manage patching processes using WSUS, SCCM, or third-party tools.
  
• Integrate security logs and data into SIEM platforms and support threat detection/response initiatives.
  
• Collaborate with IT and business units to enforce identity and access management policies including MFA and Zero Trust architectures.
  
• Support compliance efforts aligned with ISO 27001, NIST, and CIS Controls.
  
• Assess and respond to security incidents using frameworks like MITRE ATT&CK.
  
• Continuously evaluate and improve system and application security controls.
  

RequirementsQualifications:

Required:

• Bachelor’s degree in Information Security, Computer Engineering, or related field.
  
• One or more of the following certifications:
  
  

-Microsoft Certified: Security Operations Analyst
Associate (MS-SC200)

-Microsoft Certified: Identity and Access
Administrator Associate (SC-300)

-Microsoft Certified Cybersecurity Architect
Expert

Preferred:

• Master’s degree in Information Security or Computer Engineering
  
• Additional certifications such as:
  
  

-Systems Security Certified Practitioner (SSCP)

-CompTIA Cybersecurity Analyst (CySA+)

-Certified Information Systems Security
Professional (CISSP)

Experience & Knowledge Requirements:

• 5+ years of experience in Windows infrastructure
  security (Active Directory, Exchange, endpoint hardening)
  
• In-depth knowledge of:
  

-Active Directory (LDAP, Kerberos, Group Policy,
ADFS)

-Exchange security (transport rules,
SPF/DMARC/DKIM, hybrid configurations)

-Patch management systems (WSUS, SCCM, etc.)

• Strong
  PowerShell scripting capabilities for security automation and audits
  
• Proficient in
  Zero Trust architecture and multi-factor authentication practices
  
• Understanding
  of compliance frameworks: ISO 27001, NIST, CIS Controls
  
• Experience
  integrating with on-premise SIEM solutions
  
• Familiarity
  with MITRE ATT&CK and advanced threat detection techniques
  
• Solid
  background in systems, networks, and/or application security
  

Skills
Requirements:

• Security architecture and system
  hardening
  
• Scripting and automation (PowerShell)
  
• Threat detection, SIEM integration, and
  log analysis
  
• Identity and access management (IAM)
  
• Compliance and regulatory knowledge
  
• Problem-solving and incident response
  
• Strong communication and documentation
  skills