وظائف مهندسى امن معلومات في قطر

About the Role <p>Our client is seeking a SCADA Cyber Security Engineer to support the secure operation of critical operational technology (OT) environments across a major infrastructure network. The role will focus on cyber security, industrial communications, network monitoring and SCADA system reliability.</p> Key Responsibilities <ul> <li> <p>Monitor and maintain secure OT and SCADA communications.</p> </li> <li> <p>Support cyber security systems and network management platforms.</p> </li> <li> <p>Monitor communication performance across operational systems.</p> </li> <li> <p>Investigate cyber security incidents and implement corrective actions.</p> </li> <li> <p>Coordinate with internal IT teams and external vendors.</p> </li> <li> <p>Support server maintenance and communications infrastructure.</p> </li> <li> <p>Produce security, network performance and operational reports.</p> </li> <li> <p>Review cyber security risks and recommend improvements.</p> </li> <li> <p>Support disaster recovery and business continuity initiatives.</p> </li> </ul> Requirements <ul> <li> <p>Bachelor's degree in Engineering or related discipline.</p> </li> <li> <p>Minimum 10 years' experience supporting SCADA or Industrial Control Systems.</p> </li> <li> <p>Experience within utilities, water, wastewater, energy or critical infrastructure.</p> </li> <li> <p>Strong knowledge of industrial cyber security and network management.</p> </li> <li> <p>Experience with SCADA, OT systems, networking and communications.</p> </li> <li> <p>Understanding of cyber security standards and best practices.</p> </li> <li> <p>Excellent troubleshooting and stakeholder management skills.</p> </li> </ul>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <p><b>JOB PURPOSE</b></p><p><br></p><p>To lead the administration, maintenance, security, and continuous improvement of Almana Group's enterprise network infrastructure. The role is responsible for ensuring high availability, security, performance, and reliability of the Group's network environment while supervising the network team and supporting the delivery of secure and resilient IT services.</p><p><br></p><p><b>KEY RESULTS AREAS / DELIVERABLES AND KEY ACTIVITIES:</b></p><p><br></p><p><b>NETWORK INFRASTRUCTURE MANAGEMENT</b></p><p><b><i>Lead the design, implementation, administration, and continuous improvement of the Group's enterprise network infrastructure to ensure maximum availability, reliability, and performance.</i></b></p><ul><li>Manage the installation, configuration, and maintenance of LAN, WAN, WLAN, SD-WAN, VPN, MPLS, and Internet connectivity.</li><li>Administer Cisco routers, switches, voice infrastructure, Extreme Networks switches and wireless solutions, and Fortinet firewalls and wireless systems.</li><li>·Ensure network capacity planning, redundancy, scalability, and high availability across all Group locations.</li><li>Perform network upgrades, migrations, and technology refresh initiatives.</li><li>Maintain accurate network topology diagrams, configurations, and technical documentation.</li></ul><p><br></p><p><b>NETWORK SECURITY &amp; CYBER DEFENSE</b></p><p><b><i>Ensure the security and integrity of the Group's network infrastructure through the implementation of industry best practices and security controls.</i></b></p><ul><li>Configure, administer, and optimize routers, firewalls, VPNs, IDS/IPS, and network access controls.</li><li>Monitor network security events and investigate suspicious activities.</li><li>Implement network segmentation and secure connectivity between business units.</li><li>Coordinate remediation of identified vulnerabilities and security risks.</li><li>Support cybersecurity initiatives in collaboration with the Information Security team.</li></ul><p><br></p><p><b>NETWORK OPERATIONS &amp; INCIDENT MANAGEMENT</b></p><p><b><i>Ensure stable network operations through proactive monitoring, incident response, and problem resolution. </i></b></p><ul><li>Monitor network performance, bandwidth utilization, and system availability.</li><li>Lead troubleshooting and root cause analysis of complex network incidents.</li><li>Ensure timely restoration of services in accordance with defined SLAs.</li><li>Manage escalated technical issues affecting business operations.</li><li>Coordinate scheduled maintenance and communicate service interruptions to stakeholders.</li></ul><p><br></p><p><b>TECHNICAL LEADERSHIP &amp; PROJECT DELIVERY</b></p><p><b><i>Provide technical leadership to the network team while supporting the successful delivery of infrastructure projects. </i></b></p><ul><li>Supervise and mentor Network Engineers and technical support staff.</li><li>Review technical designs, configurations, and implementation plans.</li><li>Allocate workload and monitor team performance.</li><li>Participate in infrastructure modernization and digital transformation initiatives.</li><li>Evaluate emerging networking technologies and recommend improvements.</li></ul><p><br></p><p><b>VENDOR MANAGEMENT, COMPLIANCE &amp; CONTINUOUS IMPROVEMENT</b></p><p><b><i>Manage vendor relationships, ensure compliance with IT standards, and drive continuous improvement of network services. </i></b></p><ul><li>Coordinate with vendors, ISPs, and technology partners for support and project implementation.</li><li>Ensure compliance with IT policies, cybersecurity standards, and operational procedures.</li><li>Maintain software licensing, firmware updates, and hardware lifecycle planning.</li><li>Develop and maintain operational procedures and technical documentation.</li><li>Recommend process improvements to enhance network performance, security, and operational efficiency.</li></ul> </div><h2 class="h5">Skills</h2> <div data-jb-field="skills"><p><b>EDUCATION</b></p><ul><li>Bachelor's Degree in Computer Science, Information Technology, Computer Engineering, or a related discipline.</li><li>Cisco Certified Network Professional (CCNP) – Mandatory</li></ul><p><br></p><p><b>EXPERIENCE</b></p><ul><li>Minimum 5 years of hands-on experience in enterprise network engineering.</li><li>Minimum 2 years of experience in a supervisory, senior engineer, or technical lead role.</li><li>Proven experience supporting large-scale, multi-site enterprise network environments.</li><li>Hands-on experience with Cisco Routing &amp; Switching, Cisco Voice, Fortinet Firewalls, and Extreme Networks Switching &amp; Wireless Solutions.</li><li>Experience in network design, implementation, troubleshooting, and optimization.</li><li>Experience working within a large corporate or multi-business environment is highly preferred.</li></ul><p><br></p><p><b>COMPETENCIES</b></p><ul><li>Advanced expertise in Cisco Enterprise Routing, Switching, and Voice technologies.</li><li>Strong experience with Cisco Routers, Switches, and Unified Communications (Voice).</li><li>Strong experience with Extreme Networks Switches and Wireless Infrastructure.</li><li>Advanced administration of Fortinet Firewalls, VPNs, Security Policies, SD-WAN, and Wireless Solutions.</li><li>Strong understanding of TCP/IP, VLANs, OSPF, BGP, QoS, ACLs, NAT, DNS, DHCP, STP, and enterprise network security.</li><li>Experience with enterprise network monitoring, diagnostics, and performance optimization tools.</li><li>Knowledge of high availability, redundancy, disaster recovery, and business continuity networking.</li><li>Ability to design, troubleshoot, and optimize enterprise network infrastructures</li></ul></div>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span>Black &amp; Grey HR is recruiting for an established technology solutions and services provider in Doha, Qatar. Our client is seeking a SOC Engineer to strengthen its Security Operations Center (SOC) by monitoring, detecting, investigating, and responding to cybersecurity incidents across enterprise IT environments. This role is ideal for professionals with hands-on SOC experience who are passionate about threat detection, incident response, and maintaining a strong organizational security posture.<br><br><br><b>Key Responsibilities</b><br><br><u>Security Monitoring &amp; Incident Detection</u><br><br>- Monitor security alerts generated from SIEM, XDR, EDR, NDR, IDS/IPS, firewalls, and cloud security platforms.&nbsp;<br><br>- Identify, validate, triage, and prioritize security incidents based on severity, impact, and business risk.&nbsp;<br><br>- Continuously monitor security events to detect malicious activities and potential threats.&nbsp;<br><br><br><u>Incident Response &amp; Threat Investigation</u><br><br>- Investigate security incidents and perform root cause analysis.&nbsp;<br><br>- Analyze malware, attack techniques, and suspicious activities to determine impact and remediation actions.&nbsp;<br><br>- Coordinate containment, eradication, and recovery activities with internal teams.&nbsp;<br><br>- Escalate high-severity incidents following established incident response procedures.&nbsp;<br><br><br><u>Threat Hunting &amp; Detection Engineering</u><br><br>- Perform proactive threat hunting activities using scheduled queries and threat intelligence.&nbsp;<br><br>- Monitor threat hunting dashboards and validate suspicious indicators of compromise.&nbsp;<br><br>- Identify emerging attack patterns and recommend improvements to detection capabilities.&nbsp;<br><br><br><u>Vulnerability Management &amp; Security Operations</u><br><br>- Review vulnerability assessment results and monitor remediation progress.<br><br>- Validate patch implementation and ensure timely closure of remediation activities.&nbsp;<br><br>- Support day-to-day security operations and ensure compliance with operational procedures.&nbsp;<br><br><br><u>Reporting &amp; Operational Excellence</u><br><br>- Maintain accurate incident records, investigation notes, and ticket updates.&nbsp;<br><br>- Prepare daily operational reports, shift handover documentation, and incident summaries.<br><br>- Ensure compliance with defined SLAs and operational performance metrics.&nbsp;<br><br>- Contribute to continuous improvement of SOC processes and security operations.<br><br></span><br><span>Requirements- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a&nbsp; related field.<br><br>- 1–4 years of hands-on experience working in a Security Operations Center (SOC).&nbsp;<br><br>- Experience monitoring SIEM, EDR/XDR, IDS/IPS, firewalls, email security, and cloud security platforms.&nbsp;<br><br>- Good understanding of incident triage, security event classification, escalation procedures, and ticket management.&nbsp;<br><br>- Strong understanding of networking fundamentals including TCP/IP, DNS, HTTP/HTTPS, VPN, routing, switching, and common network protocols.&nbsp;<br><br>- Experience working with Windows and Linux operating systems, endpoint security, and system log analysis.&nbsp;<br><br>- Knowledge of common cyber threats including phishing, ransomware, malware, brute force attacks, web attacks, and insider threats.&nbsp;<br><br>- Preferred certifications:&nbsp;<br><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;o CompTIA Security+&nbsp;<br><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;o CompTIA CySA+&nbsp;<br><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;o EC-Council Certified Network Defender (CND)&nbsp;<br><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;o Cisco CyberOps Associate&nbsp;<br><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;o Microsoft SC-200&nbsp;<br><br>- Additional certifications such as CHFI or DFIR Foundations will be an advantage.<br><br><br><u>Required Skillset</u><br><br>- Security Information &amp; Event Management (SIEM) monitoring and alert analysis.&nbsp;<br><br>- Endpoint Detection &amp; Response (EDR/XDR) and Network Detection &amp; Response (NDR).&nbsp;<br><br>- Incident detection, triage, investigation, and response.&nbsp;<br><br>- Threat hunting and threat intelligence analysis.&nbsp;<br><br>- Vulnerability management and remediation tracking.&nbsp;<br><br>- Log analysis across endpoints, servers, firewalls, proxies, Active Directory, cloud platforms, and security appliances.&nbsp;<br><br>- Basic scripting skills using PowerShell, Python, or Bash for automation and log analysis.&nbsp;<br><br>- Strong documentation, communication, and incident reporting skills.&nbsp;<br><br>- Ability to work in a 24Ã7 SOC environment and collaborate effectively during security incidents.<br><br></span><br><span>Benefits- Competitive Salary + Benefits Package<br><br></span><br> </div>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> About the Role<p>Our client is seeking a SCADA Cyber Security Engineer to support the secure operation of critical operational technology (OT) environments across a major infrastructure network. The role will focus on cyber security, industrial communications, network monitoring and SCADA system reliability.</p><br><br>Key Responsibilities<ul><li>Monitor and maintain secure OT and SCADA communications.</li><li>Support cyber security systems and network management platforms.</li><li>Monitor communication performance across operational systems.</li><li>Investigate cyber security incidents and implement corrective actions.</li><li>Coordinate with internal IT teams and external vendors.</li><li>Support server maintenance and communications infrastructure.</li><li>Produce security, network performance and operational reports.</li><li>Review cyber security risks and recommend improvements.</li><li>Support disaster recovery and business continuity initiatives.</li></ul>Requirements<ul><li>Bachelor's degree in Engineering or related discipline.</li><li>Minimum 10 years' experience supporting SCADA or Industrial Control Systems.</li><li>Experience within utilities, water, wastewater, energy or critical infrastructure.</li><li>Strong knowledge of industrial cyber security and network management.</li><li>Experience with SCADA, OT systems, networking and communications.</li><li>Understanding of cyber security standards and best practices.</li><li>Excellent troubleshooting and stakeholder management skills.</li></ul> <br><br> </div>

<p>Job Description: Pre-Sales Engineer</p><p><strong>Location:</strong> Doha, Qatar <strong>Experience Level:</strong> 3–5 Years (Mid-Level)<strong>Industry:</strong> IT & Cyber Security</p><br><p><strong>Desired Candidate Profile</strong></p><p>Role Overview</p><p>We are seeking a dynamic and technically proficient Pre-Sales Engineer to join our team in Doha. The ideal candidate will act as a technical bridge between the sales team and clients, supporting the sales cycle with strong technical expertise in IT infrastructure and Cyber Security solutions. This role requires a blend of technical knowledge, presentation skills, and customer-facing experience to effectively position solutions and drive business growth.</p><p>Key Responsibilities</p><ul><li><p>Support the sales team with technical expertise throughout the pre-sales cycle, including solution design, proposal development, and presentations.</p></li><li><p>Conduct product demonstrations, proof of concepts (POCs), and technical presentations to prospective clients.</p></li><li><p>Understand customer requirements and translate them into tailored technical solutions covering IT infrastructure and Cyber Security domains.</p></li><li><p>Prepare and respond to RFPs, RFIs, and technical proposals in coordination with the sales and delivery teams.</p></li><li><p>Collaborate with OEMs/vendors/partners to stay updated on the latest technologies, product roadmaps, and solution offerings.</p></li><li><p>Assist in the preparation of Bill of Materials (BOM), solution architecture diagrams, and technical documentation.</p></li><li><p>Provide technical training and support to the internal sales team to enhance their product knowledge and confidence in client interactions.</p></li><li><p>Participate in client meetings, workshops, and technical discussions to address queries and provide solution clarity.</p></li><li><p>Coordinate with the technical/delivery team to ensure proposed solutions are feasible and align with client requirements.</p></li><li><p>Stay updated with emerging trends in IT and Cyber Security to identify new business opportunities.</p></li></ul><p>Required Skills & Qualifications</p><ul><li><p>Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field.</p></li><li><p>3–5 years of relevant experience in a Pre-Sales, Solutions Engineering, or Technical Consulting role within the IT and Cyber Security domain.</p></li><li><p>Strong understanding of IT infrastructure (networking, servers, storage, cloud) and Cyber Security concepts (firewalls, endpoint security, SIEM, IAM, etc.).</p></li><li><p>Hands-on knowledge of leading Cyber Security and IT vendor solutions (e.g., Fortinet, Palo Alto, Cisco, Microsoft, etc. – customize as per your OEM partnerships).</p></li><li><p>Excellent presentation and communication skills, with the ability to explain technical concepts to both technical and non-technical audiences.</p></li><li><p>Proven ability to work closely with sales teams to support deal closure through technical validation.</p></li><li><p>Experience in preparing technical proposals, solution documents, and BOMs.</p></li><li><p>Strong analytical and problem-solving skills.</p></li><li><p>Relevant certifications (e.g., CompTIA Security+, CCNA, Fortinet NSE, Microsoft certifications) are an added advantage.</p></li></ul><p>Preferred Attributes</p><ul><li><p>Prior experience working in the Qatar/GCC market is preferred.</p></li><li><p>Ability to manage multiple opportunities and work under pressure to meet deadlines.</p></li><li><p>Strong interpersonal skills to build relationships with both internal teams and external clients.</p></li><li><p>Self-motivated, proactive, and customer-focused approach.</p></li></ul>

<p>The <strong>CSEA Contractor</strong> is expected to provide hands-on support to the Cyber Security Engineering and Architecture section by contributing to security architecture activities, technical security reviews, control implementation, risk assessments and advisory services across enterprise systems, infrastructure, cloud environments and applications.</p><p>The contractor is expected to have:</p><ul><li><p>Hands-on experience with Enterprise Security Architecture methodologies and modern security technologies, including IAM, SIEM, EDR/XDR, WAF, SASE, Zero Trust, cloud security, and security automation tools.</p></li><li><p>Strong knowledge of IT infrastructure security, including network security, cloud security, endpoint security, identity security, and secure architecture design principles.</p></li><li><p>Strong knowledge of application security, including secure SDLC, DevSecOps, API security, secure coding practices, and application threat modeling.</p></li><li><p>Experience implementing, validating, and reviewing security controls across IT infrastructure, cloud platforms such as AWS, Azure, and GCP, and enterprise applications.</p></li><li><p>Experience developing, maintaining, and enhancing security control libraries, security patterns, baselines, and architecture standards, while ensuring their integration into security architecture and engineering activities.</p></li><li><p>Strong understanding of cybersecurity standards, laws, and frameworks, including NIST, ISO/IEC 27001, CIS Controls, GDPR, PCI-DSS, and other relevant regulatory or compliance requirements.</p></li><li><p>Strong understanding of cybersecurity best practices, including secure network architecture, endpoint protection, identity and access management, cloud security, DevSecOps, and defense-in-depth design.</p></li><li><p>Experience conducting security design reviews, architecture assessments, threat modeling, technical risk assessments, and security gap assessments.</p></li><li><p>Ability to support business units, project teams, IT teams, and security stakeholders in selecting, designing, and implementing secure information systems and technology solutions.</p></li><li><p>Experience with security automation and scripting using tools and languages such as Python, PowerShell, Bash, Terraform, Ansible, or similar technologies.</p></li><li><p>Ability to support security investigations, incident response activities, forensic analysis, root cause analysis, and post-incident improvement recommendations when required.</p></li><li><p>Experience providing technical consultation and advisory support on CSEA-related projects, initiatives, and engagements as requested by the CSEA Section Head.</p></li><li><p>Excellent ability to translate technical cybersecurity concepts, risks, and recommendations into clear business language for both technical and non-technical stakeholders.</p></li><li><p>Experience participating in cybersecurity committees, technical working groups, architecture review boards, project meetings, and cross-functional security discussions.</p></li><li><p>Strong problem-solving, analytical, and decision-support skills, with the ability to assess complex technical environments and recommend practical security solutions.</p></li><li><p>Ability to work independently while also collaborating effectively with security architects, SOC analysts, IT teams, application teams, project managers, and business stakeholders.</p></li><li><p>Excellent verbal and written communication skills, with the ability to document security findings, architecture recommendations, risks, and remediation actions clearly and professionally.</p></li><li><p>Ability to mentor and support CSEA team members as needed by transferring knowledge, sharing technical expertise, and contributing to the development of internal cybersecurity engineering and architecture capabilities.</p></li></ul><p><strong>Key Deliverables:<br></strong></p><p>The contractor may be expected to support or deliver:</p><ul><li><p>Security architecture reviews</p></li><li><p>Security design review reports</p></li><li><p>Threat models and risk assessments</p></li><li><p>Security control mapping and recommendations</p></li><li><p>Architecture patterns, baselines, and standards</p></li><li><p>Technical security advisory reports</p></li><li><p>Secure design recommendations for infrastructure, cloud, and applications</p></li><li><p>Security improvement roadmaps</p></li><li><p>Support for incident response, investigations, and technical analysis</p></li><li><p>Knowledge transfer sessions for CSEA members</p></li></ul><p><br></p><p><strong>Desired Candidate Profile</strong></p><p><strong>Requirements</strong></p><p><strong>Education:<br></strong></p><ul><li><p>Bachelor’s degree in a technology-related field, such as Cybersecurity, Computer Science, Computer Engineering, Information Security, Information Technology, or a related discipline. A higher degree or relevant professional certifications are preferred.</p></li></ul><p>Experience:</p><ul><li><p>Minimum&nbsp;of 10 years relevant experience in cybersecurity, information security, security engineering, or IT infrastructure security, with at least 3 years of hands-on experience in cybersecurity architecture, security engineering, or enterprise security architecture.</p></li></ul><p>Preferred Certifications:</p><ul><li><p>CISSP, CISM, SABSA, or TOGAF certifications preferred.</p></li><li><p>Cloud security certifications such as CCSP, Azure Security Engineer, or AWS Security Specialty preferred.</p></li><li><p>Cybersecurity certifications such as GCIH, GCIA, GSEC, or Security+ preferred.</p></li><li><p>Other relevant cybersecurity, cloud security, or architecture certifications considered.<br></p></li></ul><p><strong><em>Proficiency in English & Arabic is required.</em></strong></p><p><br></p>

<section><p class="heading jdMain">Job Description</p><p class="heading">Roles &amp; Responsibilities</p><div class="paragraph"><p>We are seeking for an ICT/Cybersecurity Engineer with a good understanding of network and cybersecurity fundamentals to assist in project implementation, strong documentation skills along with on-site coordination expertise. The role involves close collaboration with senior engineers in deployment, testing, commissioning, and documentation of the network and security systems across multiple sites. This position suits a hands-on engineer who enjoys both field and office work, has experience in project execution phases, and is eager to excel in network and cybersecurity domains. Key Responsibilities: Assist ICT team in planning, deployment, commissioning, and testing of network/security equipment &amp; solutions across multiple sites. Plan &amp; conduct site visits to support IT &amp; Cybersecurity related activities in timely manner. Coordinate with contractors, vendors, internal teams and other stake holders during project execution and site works. Support network connectivity testing, device configuration, cybersecurity compliance and verification as per project plans. Prepare and maintain network documentation including configuration sheets, test reports, as-built drawings, and asset inventories. Assist in basic security configurations and hardening (firewall policies, user access control, etc.). Participate in FAT/SAT, acceptance testing, and handover documentation. Provide technical support during project rollout, integration, and operational transition. Required to travel within Doha for 70% of time. Job Summary: This role provides hands-on technical support in network and cybersecurity implementation projects. The engineer will be actively involved in on-site works, configuration, testing, and documentation, ensuring smooth coordination with senior engineers and project teams to deliver secure and reliable network infrastructure.</p></div></section><section><p class="heading">Desired Candidate Profile</p><p class="paragraph"></p><p><strong>Required Skills &amp; Experience:</strong> 3 4 years of experience in ICT Infrastructure, cybersecurity, or similar roles. Hands-on experience with network devices. (Cisco / Fortinet / Palo Alto / HP / Aruba). Strong understanding of OSI Model, TCP/IP, VLANs, routing, VPN, NAT, and networking concepts. Basic knowledge and understanding of cybersecurity principles, frameworks, and best practices for threat prevention, detection, and response. Strong willingness to work on multiple sites, coordinating with vendors and installation teams. Familiar with network drawings, labeling, and documentation standards. Good analytical, problem-solving, and troubleshooting skills. <strong>Preferred Qualifications:</strong> Bachelor s degree in computer engineering, IT, or related field. Certifications such as CCNA, CompTIA Network+, Fortinet NSE 1 3, or equivalent. Exposure to firewall configuration, Wi-Fi setup, or structured cabling is an advantage. <strong>Competencies and Skills:</strong> Excellent proficiency in Primavera P6, MS Project, and Excel-based reporting tools. Strong analytical and forecasting skills. Solid understanding of construction and systems integration workflows (civil, MEP, ICT/ELV). Good interpersonal and communication skills for interaction with multidisciplinary teams. Highly organized, detail-oriented, and able to manage multiple priorities in a dynamic environment. <strong>Soft Skills:</strong> Excellent communication and coordination skills. Ability to handle field work and multiple site activities. Organized and detail-oriented in maintaining project records. Willingness to travel between sites as required. Strong teamwork and positive learning attitude.</p><p></p></section>

<p>Job Description Network, Systems &amp; Security Engineer Onsite Qatar Location: Qatar Onsite Employment Type: Full-Time Experience: 3 5 Years Travel Requirement: Candidate must be willing and able to travel to Qatar and work onsite for client assignments.</p><p>About the Role We are looking for a skilled and hands-on Network, Systems &amp; Security Engineer with 3 5 years of experience in managing enterprise IT infrastructure, network environments, servers, endpoint systems, and cybersecurity technologies. The ideal candidate should have practical experience in network administration, Windows/Linux server administration, firewalls, VPNs, Active Directory, Microsoft 365, endpoint security, vulnerability management, backup, monitoring, and infrastructure troubleshooting . The engineer will be responsible for supporting and maintaining client infrastructure, implementing security controls, troubleshooting network and system issues, performing security hardening, and ensuring the availability, performance, and security of IT environments. This is a client-facing onsite role requiring travel to Qatar . The candidate should therefore be comfortable working directly at client locations, collaborating with client IT/security teams, and handling infrastructure and security activities independently.</p><p>Key Responsibilities Install, configure, administer, monitor, and troubleshoot enterprise network and system infrastructure. Configure and manage routers, switches, firewalls, wireless access points, VPNs, VLANs, DNS, DHCP, NAT, and routing protocols . Administer Windows Server and Linux server environments . Manage Active Directory, Group Policy, DNS, DHCP, user accounts, permissions, and access controls . Support Microsoft 365 environments, including Exchange Online, Entra ID (Azure AD), SharePoint, Teams, and related services . Configure and manage firewalls, IDS/IPS, VPN gateways, endpoint security solutions, and other security technologies . Implement infrastructure and network security hardening in accordance with industry security best practices. Perform server and endpoint patching, configuration management, system upgrades, and vulnerability remediation. Support virtualisation environments such as VMware and Hyper-V . Monitor servers, networks, applications, storage, and security infrastructure for availability and performance. Investigate and troubleshoot network connectivity, server, endpoint, authentication, performance, and security issues. Perform vulnerability assessments and coordinate remediation of identified vulnerabilities. Support deployment and administration of EDR/XDR, antivirus, email security, web security, and endpoint protection technologies . Review security alerts and assist with investigation and response to security incidents. Configure and maintain system and network logging and support integration with SIEM and security monitoring platforms . Implement and maintain backup solutions and support backup restoration and disaster recovery testing. Maintain appropriate access controls and follow the principle of least privilege. Support infrastructure changes, upgrades, migrations, and implementation projects. Conduct periodic reviews of firewall rules, privileged accounts, system configurations, patches, and security controls. Maintain accurate network diagrams, asset inventories, configuration documentation, SOPs, troubleshooting guides, and technical documentation . Work closely with client infrastructure, cybersecurity, application, cloud, and support teams. Coordinate with technology vendors and service providers for troubleshooting and issue resolution. Provide onsite technical support and participate in client meetings as required. Follow change management, incident management, problem management, and information security processes. Ensure infrastructure and security activities comply with applicable organisational policies and security standards. Provide regular technical updates, incident reports, and implementation status reports to project and client stakeholders.</p><p>What We Offer Opportunity to work on enterprise-level network, infrastructure, and cybersecurity environments. Exposure to multiple infrastructure and security technologies. Opportunity to work directly with international clients. Onsite international assignment in Qatar. Exposure to enterprise security standards and cybersecurity best practices. Opportunity to work across networking, systems, cloud, and cybersecurity domains. Continuous learning and professional development opportunities. Opportunity to develop into Senior Infrastructure Engineer, Security Engineer, Network Security Engineer, Technical Lead, or Infrastructure/Security Architect roles.</p><p>Ideal Candidate You are a hands-on infrastructure professional who is equally comfortable working with networks, servers, endpoints, and cybersecurity technologies . You enjoy diagnosing complex technical problems, securing infrastructure, configuring network and security devices, administering servers, and working directly with customers. You are methodical in troubleshooting, understand the importance of documentation and change control, and can work independently when deployed at a client site. You are also comfortable communicating with client stakeholders and taking ownership of technical issues through to resolution. Most importantly, you are willing to travel to Qatar and work onsite at the client location for the required assignment period .</p><p>Location &amp; Travel Requirements This position requires onsite work in Qatar . The selected candidate must be willing and able to travel to Qatar for client assignments. The candidate should be comfortable working from the client's office/site according to client working hours and policies. Assignment duration and travel arrangements will be communicated based on project requirements. Flexibility to support critical infrastructure or security incidents outside standard working hours may occasionally be required.</p><p>Compensation: Monthly salary Onsite Salary 6000 QAR to 12000 QAR This is a Full time role with a travel opportunity to Qatar</p><p><strong>Desired Candidate Profile</strong></p><b>Required Qualifications</b><br>Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Network Engineering , or a related field.<br>3 5 years of professional experience in network, systems, infrastructure, or security engineering.<br>Strong hands-on knowledge of TCP/IP, DNS, DHCP, VLANs, VPNs, NAT, routing, switching, and network troubleshooting .<br>Hands-on experience administering Windows Server environments.<br>Good working knowledge of Linux administration.<br>Experience with Active Directory, Group Policy and Entra ID/Azure AD .<br>Experience configuring and troubleshooting enterprise firewalls.<br>Experience with Microsoft 365 administration.<br>Knowledge of endpoint security, antivirus and EDR/XDR technologies.<br>Understanding of network and system security principles, including: Network segmentation Firewall security Identity and access management Least privilege MFA System hardening Patch management Vulnerability management Logging and monitoring<br>Experience troubleshooting complex network, server, endpoint, and security issues.<br>Understanding of backup, restoration, business continuity, and disaster recovery concepts.<br>Familiarity with virtualisation technologies such as VMware or Hyper-V.<br>Ability to create and maintain technical documentation and network diagrams.<br>Strong analytical and problem-solving skills.<br>Good written and verbal communication skills.<br>Ability to communicate effectively with technical teams, management, vendors, and client stakeholders.<br>Ability to work independently in a client environment.<br><br><b>Preferred Qualifications</b><br>Experience with firewall technologies such as: Fortinet FortiGate Palo Alto Networks Cisco Check Point Sophos<br>Experience with networking technologies from Cisco, Aruba, Fortinet, Juniper, or equivalent vendors .<br>Experience with EDR/XDR platforms such as Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, or equivalent.<br>Familiarity with SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, or similar technologies .<br>Experience with vulnerability management tools such as Nessus, Qualys, Rapid7, OpenVAS/Greenbone, or equivalent .<br>Knowledge of Microsoft Azure or AWS infrastructure and security.<br>Familiarity with infrastructure and security monitoring platforms.<br>Exposure to ISO 27001, CIS Controls/CIS Benchmarks, NIST Cybersecurity Framework, PCI DSS , or similar security frameworks.<br>Experience supporting infrastructure security assessments and audits.<br>Experience working in enterprise or regulated environments.<br>Previous experience working onsite in the Qatar/GCC region would be an advantage.<br><br><b>Professional Certifications Preferred</b><br>Relevant industry certifications would be advantageous, including:<br>CCNA / CCNP<br>CompTIA Network+<br>CompTIA Security+<br>Microsoft Certified: Azure Administrator Associate<br>Microsoft Certified: Azure Security Engineer Associate<br>Fortinet Certified Professional / equivalent Fortinet certification<br>Palo Alto Networks certification<br>VMware certification<br>CEH or equivalent cybersecurity certification<br><br><b>Technical Skills</b><br><b>Networking</b><br>TCP/IP LAN/WAN VLAN Routing &amp; Switching DNS DHCP NAT VPN Wi-Fi Network Segmentation Network Troubleshooting<br><b>Network Security</b><br>Next-Generation Firewalls IDS/IPS Site-to-Site VPN Remote Access VPN Firewall Rules Access Control Lists Network Segmentation Secure Remote Access<br><b>Systems Administration</b><br>Windows Server Linux Active Directory Group Policy DNS/DHCP File and Print Services System Hardening Patch Management Server Monitoring<br><b>Microsoft Technologies</b><br>Microsoft 365 Entra ID / Azure Active Directory Exchange Online Microsoft Teams SharePoint Microsoft Defender Microsoft Azure<br><b>Cybersecurity</b><br>Endpoint Security EDR/XDR Antivirus Vulnerability Management Security Hardening Identity &amp; Access Management MFA Privileged Access Security Monitoring Incident Investigation SIEM Log Management<br><b>Virtualisation &amp; Infrastructure</b><br>VMware Hyper-V Virtual Machines Storage Backup &amp; Recovery Disaster Recovery<br><b>Tools &amp; Documentation</b><br>Network Monitoring Tools Vulnerability Scanners SIEM Platforms Ticketing / ITSM Tools Microsoft Visio or equivalent diagramming tools Network Diagrams Infrastructure Documentation SOPs and Technical Procedures

<p><strong>Key Responsibilities:</strong><br></p><ul><li><p>Designing and delivering cybersecurity training programs.<br></p></li><li><p>Creating and updating cyber security awareness/educational content.<br></p></li><li><p>Assess the training needs and evaluate the current security awareness level of organizations.<br></p></li><li><p>Develop customized training programs tailored to different employee roles and departments.<br></p></li><li><p>Review and update programs based on feedback, emerging threats, or organizational needs.<br></p></li><li><p>Develop Simulation Scenarios and Practical Exercises<br></p></li><li><p>Conducting research on emerging threats and technologies.</p></li><li><p>Monitoring and reporting training and development metrics.</p></li></ul><p><strong>Desired Candidate Profile</strong></p><p><strong>Education:</strong></p><ul><li><p>Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.</p></li><li><p>Master’s degree in Cybersecurity (Preferred)</p></li></ul><p><strong>Certifications:</strong></p><ul><li><p>CompTIA Security+<br></p></li><li><p>GIAC Security Essentials (GSEC)<br></p></li><li><p>Cisco Certified Network Associate (CCNA)<br></p></li><li><p>CompTIA Cybersecurity Analyst (CySA+)<br></p></li><li><p>Computer Hacking Forensic Investigator (CHFI)<br></p></li><li><p>CompTIA PenTest+<br></p></li><li><p>Certified Ethical Hacker (CEH)<br></p></li><li><p>Certified Penetration Tester (CPENT)<br></p></li><li><p>GIAC Certified Incident Handler (GCIH)<br></p></li><li><p>GIAC Certified Penetration Tester (GPEN)<br></p></li><li><p>Offensive Security Certified Professional (OSCP)<br></p></li><li><p>Certified Information Systems Auditor (CISA)<br></p></li><li><p>Certified Information Security Manager (CISM)<br></p></li><li><p>Certified Information Systems Security Professional (CISSP)<br></p></li></ul><p><strong>Experience:</strong></p><ul><li><p>5-10 years of experience in the Cyber Security field</p></li></ul><p><strong>Language Proficiency:</strong></p><ul><li><p>Proficiency in English & Arabic is required.</p></li></ul><p><strong>Additional Required Skills and Knowledge:</strong></p><ul><li><p>Strong presentation and communication skills.<br></p></li><li><p>Ability to simplify complex technical concepts for non-technical audiences.<br></p></li><li><p>In-depth knowledge of the latest cybersecurity threats and defence strategies.<br></p></li><li><p>Analytical thinking and problem-solving abilities.<br></p></li><li><p>Capability to assess and improve security awareness programs.</p></li></ul>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span>Black &amp; Grey HR is recruiting for an established technology solutions and services provider in Doha, Qatar. Our client is seeking a SOC Engineer to strengthen its Security Operations Center (SOC) by monitoring, detecting, investigating, and responding to cybersecurity incidents across enterprise IT environments. This role is ideal for professionals with hands-on SOC experience who are passionate about threat detection, incident response, and maintaining a strong organizational security posture.<br><br><br><b>Key Responsibilities</b><br><br><u>Security Monitoring &amp; Incident Detection</u><br><br>- Monitor security alerts generated from SIEM, XDR, EDR, NDR, IDS/IPS, firewalls, and cloud security platforms.&nbsp;<br><br>- Identify, validate, triage, and prioritize security incidents based on severity, impact, and business risk.&nbsp;<br><br>- Continuously monitor security events to detect malicious activities and potential threats.&nbsp;<br><br><br><u>Incident Response &amp; Threat Investigation</u><br><br>- Investigate security incidents and perform root cause analysis.&nbsp;<br><br>- Analyze malware, attack techniques, and suspicious activities to determine impact and remediation actions.&nbsp;<br><br>- Coordinate containment, eradication, and recovery activities with internal teams.&nbsp;<br><br>- Escalate high-severity incidents following established incident response procedures.&nbsp;<br><br><br><u>Threat Hunting &amp; Detection Engineering</u><br><br>- Perform proactive threat hunting activities using scheduled queries and threat intelligence.&nbsp;<br><br>- Monitor threat hunting dashboards and validate suspicious indicators of compromise.&nbsp;<br><br>- Identify emerging attack patterns and recommend improvements to detection capabilities.&nbsp;<br><br><br><u>Vulnerability Management &amp; Security Operations</u><br><br>- Review vulnerability assessment results and monitor remediation progress.<br><br>- Validate patch implementation and ensure timely closure of remediation activities.&nbsp;<br><br>- Support day-to-day security operations and ensure compliance with operational procedures.&nbsp;<br><br><br><u>Reporting &amp; Operational Excellence</u><br><br>- Maintain accurate incident records, investigation notes, and ticket updates.&nbsp;<br><br>- Prepare daily operational reports, shift handover documentation, and incident summaries.<br><br>- Ensure compliance with defined SLAs and operational performance metrics.&nbsp;<br><br>- Contribute to continuous improvement of SOC processes and security operations.<br><br></span><br><span>Requirements- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a&nbsp; related field.<br><br>- 1–4 years of hands-on experience working in a Security Operations Center (SOC).&nbsp;<br><br>- Experience monitoring SIEM, EDR/XDR, IDS/IPS, firewalls, email security, and cloud security platforms.&nbsp;<br><br>- Good understanding of incident triage, security event classification, escalation procedures, and ticket management.&nbsp;<br><br>- Strong understanding of networking fundamentals including TCP/IP, DNS, HTTP/HTTPS, VPN, routing, switching, and common network protocols.&nbsp;<br><br>- Experience working with Windows and Linux operating systems, endpoint security, and system log analysis.&nbsp;<br><br>- Knowledge of common cyber threats including phishing, ransomware, malware, brute force attacks, web attacks, and insider threats.&nbsp;<br><br>- Preferred certifications:&nbsp;<br><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;o CompTIA Security+&nbsp;<br><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;o CompTIA CySA+&nbsp;<br><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;o EC-Council Certified Network Defender (CND)&nbsp;<br><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;o Cisco CyberOps Associate&nbsp;<br><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;o Microsoft SC-200&nbsp;<br><br>- Additional certifications such as CHFI or DFIR Foundations will be an advantage.<br><br><br><u>Required Skillset</u><br><br>- Security Information &amp; Event Management (SIEM) monitoring and alert analysis.&nbsp;<br><br>- Endpoint Detection &amp; Response (EDR/XDR) and Network Detection &amp; Response (NDR).&nbsp;<br><br>- Incident detection, triage, investigation, and response.&nbsp;<br><br>- Threat hunting and threat intelligence analysis.&nbsp;<br><br>- Vulnerability management and remediation tracking.&nbsp;<br><br>- Log analysis across endpoints, servers, firewalls, proxies, Active Directory, cloud platforms, and security appliances.&nbsp;<br><br>- Basic scripting skills using PowerShell, Python, or Bash for automation and log analysis.&nbsp;<br><br>- Strong documentation, communication, and incident reporting skills.&nbsp;<br><br>- Ability to work in a 24Ã7 SOC environment and collaborate effectively during security incidents.<br><br></span><br><span>Benefits- Competitive Salary + Benefits Package<br><br></span><br> </div>

Senior Cloud and Network Security Engineer (Azure)<br><br>Position Summary<br><br>We are seeking a Senior Cloud and Network Security Engineer with at least 10 years of relevant experience to design, implement, and maintain secure network infrastructure across Microsoft Azure and on-premises environments.<br><br>This role combines network security architecture with hands-on engineering, with particular responsibility for DNS, VPN connectivity, Azure Private Endpoints, proxies, and on-premises firewalls. The successful candidate will support multiple projects, translating business and technical requirements into secure, reliable, and scalable network designs.<br><br>Key Responsibilities<br><br>Network Architecture and Project Delivery<br><br>- Design end-to-end network security architectures for Azure and hybrid environments, ensuring alignment with enterprise security standards and project requirements.<br>- Develop high-level and low-level designs, network diagrams, IP addressing plans, traffic flow mappings, and firewall rule matrices.<br>- Define network segmentation, routing, ingress and egress controls, and secure connectivity between applications, cloud services, and on-premises systems.<br>- Review proposed solutions, identify network security risks and dependencies, and recommend appropriate controls.<br>- Work with solution architects, cybersecurity teams, infrastructure engineers, application teams, and vendors throughout project delivery.<br><br>Azure Networking and Security<br><br>- Configure and manage Azure Virtual Networks, subnets, peering, route tables, Network Security Groups, and Application Security Groups.<br>- Implement Azure Private Endpoints and Private Link, including associated DNS configuration and access controls.<br>- Configure and troubleshoot Azure DNS, Private DNS Zones, Azure DNS Private Resolver, and hybrid DNS resolution.<br>- Implement and maintain site-to-site and point-to-site VPNs, Azure VPN Gateway, and Express Route connectivity where required.<br>- Configure Azure Firewall, network virtual appliances, NAT Gateway, and application protection services such as Web Application Firewall.<br>- Design and maintain hub-and-spoke or Azure Virtual WAN architectures, including centralized inspection and controlled outbound access.<br><br>On-Premises Firewalls, Proxies, and Hybrid Connectivity<br><br>- Configure, maintain, and troubleshoot on-premises firewalls, including security policies, NAT rules, routing, VPN tunnels, and logging.<br>- Manage enterprise proxies and secure web gateways, including authentication, URL filtering, allowlists, and TLS inspection requirements.<br>- Establish secure connectivity between Azure workloads, corporate networks, third-party services, and remote users.<br>- Investigate connectivity issues involving DNS, routing, asymmetric traffic flows, firewall policies, proxies, certificates, and VPN tunnels.<br>- Review firewall and proxy rules regularly to remove unnecessary access and enforce least-privilege connectivity.<br><br>Operations, Governance, and Documentation<br><br>- Monitor network availability, performance, and security using Azure and enterprise monitoring tools.<br>- Support incident investigation and root cause analysis for network and security-related issues.<br>- Implement changes through established change management processes, including impact assessments, testing, and rollback plans.<br>- Automate repeatable configurations using Terraform, Bicep, Power Shell, or Azure CLI.<br>- Maintain configuration documentation, operational runbooks, architecture standards, and support handover materials.<br>- Validate resilience and failover arrangements for critical network connectivity and security components.<br><br>Required Experience and Technical Skills<br><br>- Minimum 10 years of experience in network engineering, network security, infrastructure security, or closely related roles.<br>- Substantial hands-on experience designing and implementing Microsoft Azure networking and security solutions in enterprise environments.<br>- Proven delivery of hybrid architectures connecting Azure with on-premises networks.<br>- Strong practical expertise in DNS, TCP/IP, subnetting, routing, BGP, NAT, IPsec VPNs, and TLS.<br>- Demonstrated experience configuring Azure Private Endpoints and resolving hybrid private DNS issues.<br>- Hands-on experience with enterprise firewalls from vendors such as Palo Alto Networks, Fortinet, Check Point, or Cisco.<br>- Experience managing enterprise proxies or secure web gateways and troubleshooting application connectivity through these services.<br>- Strong understanding of network segmentation, Zero Trust principles, least-privilege access, and defense in depth.<br>- Infrastructure as Code (IaC): Hands-on experience using Terraform or Azure Bicep to provision and manage Azure networking and security infrastructure, including virtual networks, subnets, route tables, security groups, firewalls, VPN gateways, Private Endpoints, and DNS configurations.<br>- Experience developing reusable IaC modules, managing configurations in version control, and deploying changes through CI/CD pipelines.<br>- Ability to produce clear architecture documentation and take ownership of technical delivery across multiple projects.<br>- Strong troubleshooting, communication, and stakeholder management skills.<br><br>Qualifications and Certifications<br><br>- Bachelor’s degree in computer science, information technology, engineering, or a related discipline, or equivalent professional experience.<br>- Required: Microsoft Certified: Azure Network Engineer Associate (AZ-700).<br>- Preferred: Additional relevant Microsoft certifications in Azure architecture or cloud security.<br>- Advantageous: Professional-level networking or security certifications, such as CCNP, CCIE, CISSP, or relevant firewall vendor certifications.<br><br>Soft Skills and Professional Competencies<br><br>- Influencing and stakeholder engagement: Ability to influence technical teams, project managers, and business stakeholders to adopt secure architecture decisions and implement recommended controls.<br>- Driving best practices: Ability to establish, promote, and embed cloud infrastructure and network security best practices into project delivery and day-to-day operations.<br>- Communication: Clearly explain technical risks, architectural decisions, and recommendations to both technical and non-technical audiences.<br>- Collaboration: Work effectively across cybersecurity, infrastructure, application, and vendor teams to resolve dependencies and deliver solutions.<br>- Ownership and accountability: Take responsibility for solutions from design through implementation and operational handover, proactively addressing risks and issues.<br>- Problem-solving and judgment: Apply structured troubleshooting and sound judgment to balance security, reliability, cost, and business requirements.<br>- Constructive challenge: Confidently challenge insecure or unsustainable approaches and propose practical alternatives.<br>- Mentoring and knowledge sharing: Support colleagues through technical guidance, design reviews, documentation, and knowledge-sharing sessions.<br><br>Desirable Experience<br><br>- Supporting secure connectivity for enterprise applications, data platforms, and AI services.<br>- Working in regulated industries or large organizations with formal security governance.<br>- Integrating network and firewall logs with centralized monitoring and SIEM platforms.<br>- Designing highly available connectivity and supporting disaster recovery exercises.

<section><p class="heading jdMain">Job Description</p><p class="heading">Roles &amp; Responsibilities</p><div class="paragraph"><p>Key Responsibilities: Designing and delivering cybersecurity training programs. Creating and updating cyber security awareness/educational content. Assess the training needs and evaluate the current security awareness level of organizations. Develop customized training programs tailored to different employee roles and departments. Review and update programs based on feedback, emerging threats, or organizational needs. Develop Simulation Scenarios and Practical Exercises Conducting research on emerging threats and technologies. Monitoring and reporting training and development metrics. The contract duration is 12 months, with the possibility of extension based on departmental requirements.</p></div></section><section><p class="heading">Desired Candidate Profile</p><p class="paragraph"></p><ul><li>Bachelor s degree in Cybersecurity, Information Technology, Computer Science, or a related field.</li><li>Master s degree in Cybersecurity (Preferred)</li><li>Certifications: CompTIA Security+ GIAC Security Essentials (GSEC) Cisco Certified Network Associate (CCNA) CompTIA Cybersecurity Analyst (CySA+) Computer Hacking Forensic Investigator (CHFI) CompTIA PenTest+ Certified Ethical Hacker (CEH) Certified Penetration Tester (CPENT) GIAC Certified Incident Handler (GCIH) GIAC Certified Penetration Tester (GPEN) Offensive Security Certified Professional (OSCP) Certified Information Systems Auditor (CISA) Certified Information Security Manager (CISM) Certified Information Systems Security Professional (CISSP)</li><li>5-10 years of experience in the Cyber Security field</li><li>Proficiency in English &amp; Arabic is required.</li><li>Strong presentation and communication skills.</li><li>Ability to simplify complex technical concepts for non-technical audiences.</li><li>In-depth knowledge of the latest cybersecurity threats and defence strategies.</li><li>Analytical thinking and problem-solving abilities.</li><li>Capability to assess and improve security awareness programs.</li></ul><p></p></section>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <p> <b>Experience:</b> 3–5+ years in OT/ICS Cybersecurity</p><p> <b>Industry:</b> Oil &amp; Gas / Petrochemical</p><p> <b>Education:</b> Bachelor’s in Cybersecurity, Computer Science, Electrical/Electronics or related field</p><p> <b>Certification:</b> SANS ICS Certification; <b>GICSP </b></p><p> <b>Skills:</b> PLC, DCS, SCADA, ESD, PDC, Firewalls, Networks, IDS/IPS, SIEM</p><p> <b>Standards:</b> ISA-99, IEC 62443, IEC 61511, IEC 62351, ISO 27001/27002/27005</p><p> <b>OEM:</b> Siemens, HIMA, Triconex, Honeywell, GE, Allen-Bradley, Cisco</p> </div><h2 class="h5">Skills</h2> <div data-jb-field="skills"><ul><li><b>OT / ICS Cybersecurity</b></li><li><b>DCS / PLC / SCADA / SIS / ESD</b></li><li><b>OT Network Security &amp; Segmentation</b></li><li><b>Firewalls / Routers / Switches</b></li><li><b>Risk &amp; Vulnerability Assessment</b></li><li><b>System Hardening &amp; Patch Management</b></li><li><b>SIEM / IDS / IPS / Nozomi</b></li><li><b>IEC 62443 / ISA-99</b></li><li><b>ICS Security Monitoring &amp; Incident Response</b></li><li><b>Backup &amp; Disaster Recovery</b></li><li><b>FAT / SAT / Commissioning</b></li><li><b>Oil &amp; Gas / Petrochemical Cybersecurity</b></li><li><b>GICSP / SANS ICS </b></li></ul><p><br></p><p><br></p></div>

<p>Join us as a Senior Cybersecurity Engineer and help protect critical systems while shaping security policy and strategy. We're seeking a technical expert who thrives on solving complex security challenges and guiding teams toward resilient, secure technology environments. What will you do? Design, develop, and test secure technology systems including perimeter and cloud-based networks Provide deep domain expertise to operational teams on security policies, compliance, and regulatory requirements Conduct comprehensive security assessments and testing to identify and mitigate risks Develop expert policy analysis through ID cards, heatmaps, and playbooks that influence internal and external security positions</p><p><strong>Desired Candidate Profile</strong></p><ul><li>Cloud Security intermediate level; securing cloud-based infrastructure and applications</li><li>Cryptography intermediate level; implementing encryption protocols to protect sensitive data</li><li>Identity and Access Management intermediate level; designing access controls and authentication frameworks</li><li>Network Security Design intermediate level; architecting secure network perimeters and segmentation</li><li>Secure Software Development Life Cycle intermediate level; embedding security practices throughout development processes</li><li>Security Assessment intermediate level; evaluating systems for vulnerabilities and compliance gaps</li><li>Security Information and Event Management intermediate level; monitoring and analyzing security events</li><li>Risk Compliance and Governance intermediate level; ensuring adherence to regulatory and policy requirements</li><li>Strong problem-solving mindset to independently address complex security challenges</li><li>Collaborative approach to working with cross-functional teams and mentoring others</li><li>Ability to influence stakeholders and drive security priorities across the organization</li><li>Passion for continuous learning in a rapidly evolving cybersecurity field</li></ul>

<section><p class="heading jdMain">Job Description</p><p class="heading">Roles &amp; Responsibilities</p><div class="paragraph"><ul><li><p>Develop and implement ICS/OT Cyber Security frameworks, policies, and procedures.</p></li><li><p>Ensure compliance with ISA/IEC 62443 and industry cybersecurity standards.</p></li><li><p>Perform OT risk assessments, vulnerability assessments, and cybersecurity gap analysis.</p></li><li><p>Secure Industrial Control Systems including DCS, PLC, SIS, SCADA, and Windows-based OT environments.</p></li><li><p>Manage patch management, antivirus, Active Directory, firewalls, SIEM, IDS/IPS, and endpoint security.</p></li><li><p>Support incident response, threat monitoring, and cybersecurity investigations.</p></li><li><p>Design and review secure OT network architecture, network segmentation, and industrial communication security.</p></li><li><p>Participate in FAT, SAT, commissioning, MOC, PSSR, and operational handover activities.</p></li><li><p>Collaborate with Operations, Maintenance, Engineering, and IT teams to strengthen OT cybersecurity.</p></li><li><p>Prepare technical documentation, reports, and cybersecurity compliance records.</p></li></ul></div></section><section><p class="heading">Desired Candidate Profile</p><p class="paragraph"></p><ul><li><p>Bachelor's Degree in Electrical, Instrumentation, Electronics, Automation, Computer Engineering, Computer Science, Cyber Security, or related discipline.</p></li><li><p>Minimum 5 years of experience in Control Systems Engineering, DCS/PLC/SIS, Instrumentation, or Industrial Automation.</p></li><li><p>Minimum 3 years of hands-on ICS/OT Cyber Security experience in Oil &amp; Gas, Petrochemical, Refinery, LNG, or Chemical Manufacturing industries.</p></li><li><p>Strong knowledge of ISA/IEC 62443, NIST SP 800-82, and industrial cybersecurity best practices.</p></li><li><p>Experience with Active Directory, Windows Server, GPO, SIEM, IDS/IPS, Firewalls, Antivirus, and Patch Management.</p></li><li><p>Knowledge of Industrial Protocols such as Modbus, Profibus, OPC, and Ethernet/IP.</p></li><li><p>Experience with Honeywell, Yokogawa, or Emerson DCS platforms is highly preferred.</p></li><li><p>Professional certifications such as ISA/IEC 62443, GICSP, CISSP, CCNA, or MCSE will be an advantage.</p></li><li><p>Strong communication, troubleshooting, and stakeholder management skills.</p></li></ul><p></p></section>

<section><p class="heading jdMain">Job Description</p><p class="heading">Roles &amp; Responsibilities</p><div class="paragraph"><p>Commissions the preparation and the implementation of necessary operational security software updates, firewall installation, hardware additions, and any authorized technical changes related to the security functions to ensure compliance both with internal security policies etc. and applicable laws and regulations required security levels.</p><p>Design and manage processes for detection, investigation, correction, and/or prosecution of operational security breaches, violations, and incidents.</p><p>Benchmark, analyze report on, and make recommendations for the improvement of Operational Technology (OT) security infrastructure.</p><p>Works with management to ensure that as new equipment, facilities, services, and systems are installed that the OT security issues are addressed.</p><p>Typically, a background in technical Operational Technology (OT) roles such as architecture, security program development or operations, with a clear and abiding interest in operational security.</p><p>Liaison with and offers technical direction to related operational security governance functions (such as Physical Security/Facilities, Risk Management, Legal and Compliance) plus senior and middle managers throughout the organization as necessary, on information security matters such as routine security activities plus emerging security risks and control technologies.</p><p>Plan, implement and upgrade security measures and controls.</p><p>Protect digital files and operational security systems against unauthorized access, modification, or destruction.</p><p>Maintain data and monitor/review security access authorizations.</p><p>Manage network, intrusion detection and prevention systems.</p><p>Work out on the security tools such as security asset inventory management and risk management reporting to security information and event management system (SIEM).</p><p>Define, implement, and maintain corporate security manuals, policies, procedures &amp; instructions.</p><p>Coordinate further security plans, awareness received from vendors and take required actions.</p><p>Security assessments of network infrastructure, hosts and applications.</p><p>Work out on ICS security related audit findings and maintain corrective actions.</p><p>Download, validate and apply the latest Antivirus DAT file to AV server and ensure published to all ICS machines by continuously monitor the AV server dashboard.</p><p>Asset identification, monitoring and analysis using supportive tools (IPS, firewall log, system events and antivirus reports.</p><p>ICS Firewall Events log, DNS, Router, and switches Events log analysis.</p><p>Validation and deployment of firmware and software updates, deactivate of unnecessary software's or access.</p><p>Define and implement backup schedule for all ICS assets, System configuration backups, Machines image backups, Router and switches backups, FW backups.</p><p>Manage User accounts ICS, network, and security equipment.</p><p>Support Project execution team to integrate new Operational Technology (OT) system in Plant security framework.</p><p>Work out on Audit findings and observations.</p><p>Work out with ICS modifications as requested.</p><p>Collect and archive system logs, events, change logs, failure events etc. To support audit and forensic analysis.</p><p>Ensure that all implementation activities are complied with published ICS policies, instructions, procedures,</p></div></section><section><p class="heading">Desired Candidate Profile</p><p class="paragraph"><b>Bachelor's Degree</b> in Information security Technology, Computer Science or Electronic/Electrical Engineer. <br>Must be ICS certified from SANS, however following certificates will be great additional advantage for the candidate: - <br><br>GIAC GICSP (Global Industrial Cybersecurity Professional). <br>ISA CAP (Certified Automation Professional). <br>Cybersecurity for Automation, Control, and SCADA Systems (ISA-99/IEC-62443) - ISA <br>Advanced SCADA Security - Red Tiger/ any other vendor. <br>Industrial Cybersecurity for OPC - Matrikon/any other vendor. <br>OPC-UA Hands-on Training Level-3 - OPCTI. <br><br><br>3-5 years at least of field experience in OT Cybersecurity domain in Oil &amp; gas &amp; petrochemical industry. <br>Excellent knowledge of common IT/OT ICS specialization areas related to PLC's, DCS's, PDCS, Firewalls, networks, and switches. <br>Exposure of implementing IT/OT security policies and regulations. <br>Knowledge of international &amp; national standards frameworks such as ISA99, IEC62433, IEC61511, IEC62351, IEC62591 ISO27001, 27002, 27005 Compliance regulations. <br>Extensive knowledge of several ICS DCS/PDCS/PLC/ESD/Servers, routers, switches &amp; firewalls technologies within several OEM technologies such as, Siemens, HIMA, TRICONEX, HONEYWELL, GE, Allan Bradley, CISCO, MacAfee.</p></section>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <p>* To execute the day-to-day ICS activities related to the operational technology security in the plants by managing the design and overseeing the implementation of all security measures linked to ICS applications and systems, conducting risk assessment and developing contingency plans to mitigate any foreseeable security threats and protect the confidentiality and integrity of employee, customer and business information in compliance with ICS cybersecurity policies , instructions, manuals and standards.</p><br><br><p>* Commissions the preparation and the implementation of necessary operational security software updates, firewall installation, hardware additions, and any authorized technical changes related to the security functions to ensure compliance both with internal security policies etc. and applicable laws and regulations required security levels.* Design and manage processes for detection, investigation, correction, and/or prosecution of operational security breaches, violations, and incidents.<br>* Benchmark, analyze report on, and make recommendations for the improvement of Operational Technology (OT) security infrastructure.* Works with management to ensure that as new equipment, facilities, services, and systems are installed that the OT security issues are addressed.<br>* Typically, a background in technical Operational Technology (OT) roles such as architecture, security program development or operations, with a clear and abiding interest in operational security.* Liaison with and offers technical direction to related operational security governance functions (such as Physical Security/Facilities, Risk Management, Legal and Compliance) plus senior and middle managers throughout the organization as necessary, on information security matters such as routine security activities plus emerging security risks and control technologies.<br>* Plan, implement and upgrade security measures and controls.* Protect digital files and operational security systems against unauthorized access, modification, or destruction.<br>* Maintain data and monitor/review security access authorizations.* Manage network, intrusion detection and prevention systems.<br>* Work out on the security tools such as security asset inventory management and risk management reporting to security information and event management system (SIEM).* Define, implement, and maintain corporate security manuals, policies, procedures &amp; instructions.<br>* Coordinate further security plans, awareness received from vendors and take required actions.* Security assessments of network infrastructure, hosts and applications.<br>* Work out on ICS security related audit findings and maintain corrective actions.* Download, validate and apply the latest Antivirus DAT file to AV server and ensure published to all ICS machines by continuously monitor the AV server dashboard.<br>* Asset identification, monitoring and analysis using supportive tools (IPS, firewall log, system events and antivirus reports.* ICS Firewall Events log, DNS, Router, and switches Events log analysis.<br>* Validation and deployment of firmware and software updates, deactivate of unnecessary software's or access.* Define and implement backup schedule for all ICS assets, System configuration backups, Machines image backups, Router and switches backups, FW backups.<br>* Manage User accounts ICS, network, and security equipment.* Support Project execution team to integrate new Operational Technology (OT) system in Plant security framework.<br>* Work out on Audit findings and observations.* Work out with ICS modifications as requested.<br>* Collect and archive system logs, events, change logs, failure events etc. To support audit and forensic analysis.* Ensure that all implementation activities are complied with published ICS policies, instructions, procedures,</p><br><br><ul> <li>Bachelor's Degree in Information security Technology, Computer Science or Electronic/Electrical Engineer.</li> <li>Must be ICS certified from SANS, however following certificates will be great additional advantage for the candidate: - <ul> <li>GIAC GICSP (Global Industrial Cybersecurity Professional).</li> <li>ISA CAP (Certified Automation Professional).</li> <li>Cybersecurity for Automation, Control, and SCADA Systems (ISA-99/IEC-62443) - ISA</li> <li>Advanced SCADA Security - Red Tiger/ any other vendor.</li> <li>Industrial Cybersecurity for OPC - Matrikon/any other vendor.</li> <li>OPC-UA Hands-on Training Level-3 - OPCTI.</li> </ul> </li> <li>3-5 years at least of field experience in OT Cybersecurity domain in Oil &amp; gas &amp; petrochemical industry.</li> <li>Excellent knowledge of common IT/OT ICS specialization areas related to PLC's, DCS's, PDCS, Firewalls, networks, and switches.</li> <li>Exposure of implementing IT/OT security policies and regulations.</li> <li>Knowledge of international &amp; national standards frameworks such as ISA99, IEC62433, IEC61511, IEC62351, IEC62591 ISO27001, 27002, 27005 Compliance regulations.</li> <li>Extensive knowledge of several ICS DCS/PDCS/PLC/ESD/Servers, routers, switches &amp; firewalls technologies within several OEM technologies such as, Siemens, HIMA, TRICONEX, HONEYWELL, GE, Allan Bradley, CISCO, MacAfee.</li> </ul><br><ul> <li><strong>Salary:</strong><ul> <li>Monthly Rate in QAR Plus allowance</li> </ul></li> <li><strong>Work Schedule:</strong><ul> <li>8 Hours / 5 Days</li> </ul></li> </ul> <ul> <li><strong>Duration:</strong> <ul> <li>2 years with possible extension</li> </ul> </li> <li><strong>Location:</strong> <ul> <li>Qatar</li> </ul> </li> </ul> </div>