Senior SOC Analyst

Mannai ICT

Mannai ICT, the Information & Communication Technology Division of Mannai Corporation, is Qatar’s leading systems integrator with over 30 years serving over 5,000 clients. Mannai ICT offers end-to-end IT solutions, including networking, servers, storage, software applications, and digital transformation. As the Platinum Partner for HP in Qatar, Mannai ICT delivers cutting-edge IT infrastructure and enterprise solutions across all industries. With specialized divisions like Microsoft Solutions, InfoTech, and Office Equipment, Mannai ICT supports Qatar’s technological transformation with innovative and reliable services.

We are seeking a skilled and experienced SOC Analyst – Senior to join our team. We are looking for candidates with a strong background in cybersecurity operations and a deep understanding of security information and event management (SIEM) systems. This position will be on a contractual basis for 2 to 3 years, extendable.

Key Responsibilities:

• Monitoring and analysis of cyber security events with the use of (SIEM) and other tools.
• SOAR experience to Design and configure automation and workbooks.
• SIEM as MS Sentinel and Q-Radar and other tools use case management (alerts and reports) as per industry best practices.
• Monitor EDR to detect and investigate suspicious activities across all products.
• Monitor shadow IT for external threats and data exfiltration.
• Provide analysis and trending of security log data from many heterogeneous IT security devices.
• Continuous threat hunting and liaise with the relevant team in case of a suspected incident.
• Provide threat and vulnerability analysis as well as security advisory services.
• Analyze and respond to previously undisclosed software and hardware vulnerabilities.
• Investigate, document, and report on Cybersecurity issues and emerging trends.
• Review SOC Analyst ticket queue, review tickets, closure or reassignment as needed.
• Create/review/modify documentation as needed, to include any process or procedure and thus ensure it is up to date and standard.
• Provide analytical feedback on network traffic patterns.
• Provide analytical feedback related to malware and other network threats.
• Understand information security policies and best practices in environments.
• Provide technical support within the Security Incident and Event Management team to assist in the investigation and remediation of security incidents.
• Escalate incident remediation changes with other business units, vendors, and customers, adhering to a predefined ITIL change management framework.
• Where necessary, liaise and work with Professional Services Engineers and Solutions Architects around incident investigation and reporting.
• Maintain detailed knowledge of the environment(s), where applicable, by maintaining and updating relevant documentation such as Network Diagrams, Configuration and Asset Databases along with process and procedural documentation.
• Change management calendar updates/closures.
• Monthly SOC Reports.
• SOC White Board daily/weekly updates.
• Conduct security assessments regularly to identify vulnerabilities and performing risk analysis.
• Document incidents to contribute to incident response and disaster recovery plans.
• In the case of third-party vendors, verify their security strength and collaborate with them.
• Analysis of phishing emails reported by internal end users.
• Excellent understanding of application layer attacks, network level attacks, zero-day attacks etc.
• Excellent understanding of kill chain, attack life cycle.
• Perform other duties as requested to meet the ongoing organizational needs.