11 hours ago
Doha, QatarMid Level
Responsibilities
- Serve as the technical subject matter expert and primary point of contact for security automation, orchestration, playbooks, and incident-response lifecycle automation.
- Administer, deploy, maintain, and manage the content, changes, versions, patches, and lifecycle of SOAR platforms.
- Assess and improve SOC processes and workflows by integrating automation into detection and response operations.
- Develop playbooks, custom Python scripts, integrations, and pipelines to triage incidents, enrich logs and alerts, and reduce analysis time.
- Integrate SOAR platforms with security tools, detection and response systems, and ITSM platforms.
- Operate and mature SOC playbook, workflow automation, and use-case capabilities.
- Support client setup, transition, onboarding, and managed security service delivery.
Requirements
- Relevant degree and one or more SOAR platform-related certifications.
- At least three years of SOAR implementation and support experience or at least five years of cyber security engineering experience.
- Proven experience with SOAR technologies such as Palo Alto Cortex XSOAR, Splunk SOAR/Phantom, Microsoft Sentinel Automation/Logic Apps, or IBM Resilient.
- Knowledge of security architecture, tool integration, API development, automation, incident response, and SOC processes.
- Experience with Python scripting, REST APIs, JSON, HTML/CSS, JavaScript, and XML.
- Experience developing security operations dashboards and reports.
- Experience with Linux and Windows operating system internals.
- Experience building or customizing integrations and playbooks with firewalls, EDR, SIEM, and ticketing tools.
- Experience integrating SOAR platforms with ITSM systems such as Jira or ServiceNow.
- Strong problem-solving, independent-work, written-communication, and verbal-communication skills.
- Familiarity with the region and experience working for an MSSP or MDR provider are desirable.
Tech Stack
Categories
About Malomatia
Malomatia is a Doha-based IT services and systems integration firm that delivers consulting, managed services, contact center operations, and enterprise solutions in cybersecurity, cloud, and AI for government and regulated industries in Qatar. The company builds and operates mission-critical platforms, including Oracle and other cloud environments, and provides SLA-driven support. Founded in 2008, it focuses on national digital programs and large public-sector modernization initiatives.