SOC OT ANALYST

Company
QatarEnergy is an integrated national oil corporation that stands at theforefront of efforts for the long term sustainable

development,utilization and monetization of oil and gas resources in the State ofQatar. In its efforts to become one of the

best national energycompanies in the world, QatarEnergys activities and those of itssubsidiaries and joint ventures,

encompass the entire spectrum of theoil and gas value chain locally, regionally, and internationally. Theyinclude the

exploration, refining and production, marketing, and sale ofoil and gas, liquefied natural gas (LNG), natural gas

liquids(NGL), gasto liquids (GTL) products, refined products, petrochemicals,fertilizers, steel and aluminum. As an

integrated corporation,QatarEnergys activities also include marketing and sale of oil and gasand other various products.

QatarEnergys operations and activities areconducted at various onshore locations, including Doha, Dukhan and

theMesaieed and Ras Laffan Industrial Cities; and at various offshoreareas, such as offshore oilfields production stations,

drillingplatforms, Halul oil export island, and the North Field, which is thelargest single non-associated gas reservoir in the

world covering anarea of 6,000 square kilometers. The utilization of this field’s massivereserves has become a primary
national goal to continue the developmentand prosperity of the country. QatarEnergy pays the utmost attention tothe health

and safety of its employees, contractors, visitors and thelocal communities where it operates. From drilling to

construction,operations to decommissioning, QatarEnergys health, safety andenvironment policy forms an integral part of

the corporation’s dailybusiness and long term planning. QatarEnergy is committed to contributeto a better future by meeting
today’s economic needs, while safeguardingour environment and resources for generations to come. Thriving oninnovation
and excellence, QatarEnergy is bound to the highest levels ofsustainable human, socio-economic, and environmental

development inQatar and beyond.

Department
INFORMATION & COMMUNICATION TECHNOLOGY

Primary purpose of job
Responsible for monitoring, analysing, and responding to OT security alerts triggered by QatarEnergy Cyber Defence

Platforms and Threat intelligence feeds. Primary responsibilities detect anomaly and potential security threats within the OT

environment. Filtering false positive alerts, determine if a critical OT system or data set has been impacted; provides

technical analysis; provides recommendations on contamination and remediation; and escalates incidents to OT SMEs

when deep technical analyses required. Will use variety of OT/IT tools to analyse and investigate incidents and take

immediate action or recommend a course of action to safeguard QatarEnergy OT environments.

Experience & Skills
5+ years of experience working in a large-scale OT environment with focus on Information Security, and knowledge of

Operational Technology.

• 1-3 years previous Security Operations Centre Experience in conducting IT/OT security monitoring or investigations.

• Demonstrated ability to analyze, triage and remediate security incidents and strong understanding of security incident

• Good knowledge of OT including multiple operating systems and system administration skills (Windows, Unix, SCADA)
• Good knowledge SIEM, SOAR, FW, Sandboxing, VPNs, and enterprise level cyber security products.
• Understanding on the latest current IT/OT cyber security intrusions, attacks, hacking techniques, vulnerability disclosures,

• Good understanding on cloud, client-server applications, multi-tier web applications, relational databases.
• Good awareness of IT/OT Support processes, such as COBIT, ITIL.
• Strong understanding of networking principles including TCP/IP, WANs, LANs, and commonly used Internet protocols and

• Knowledge on IT/OT security best practices and concepts Vulnerability Assessment & Penetration Testing.
• Possession of Industry Certifications (GCIA, SANS, ICS2, EC-Council, other relevant cyber security technical

• Good understanding of Windows logs, Linux logs, SCADA logs and Firewall logs.

Education
Bachelor’s degree in information security, computer science, or systems engineering.