CSOC, Security Operations Analyst

About Commercial Bank

Job Summary

Key Accountabilities And Responsabilities

• Continuous monitoring and review of security events, reports, alerts and CSOC dashboards to identify anomalous patterns indicative of potential security incidents
• Responsible for timely and effective response to, and management of, incidents, events, notifications, calls and other activities related to CSOC including Root Cause Analysis
• Gather relevant information and provide actionable intelligence on potential cyber security threats and incidents
• Prepare CSOC reports (for presentation if needed) on daily, weekly and monthly KRIs
• Responsible for creation and fine-tuning of use-cases and alerts in the CSOC monitoring environment
• Perform regular health checks on all CSOC systems and tools and ensure that all hosts are monitored and required security event logs are being collected
• Take direction and guidance from InfoSec Management to build, support and update the CSOC playbooks/processes
• Render support for the administration and configuration of security controls such as SIEM, Anti-virus software, network security devices, PAM, DLP, Vulnerability Management, etc.
• Prepare security awareness messages, presentations and announcements for management, IT staff, and regular users
• Participate in regular cyber drills and CSOC exercises

Other Accountabilities

• Identify and communicate daily all critical items requiring the attention of senior management and coordinate with relevant teams to provide necessary remediation action
• Perform exception reviews, due diligence activities and risk assessment when required
• Facilitate technology audit and control remediation activities to ensure items are closed in a timely manner
• Manage all documentation related to information security incidents
• Identify and communicate daily all critical items requiring the attention of senior management and coordinate with relevant teams to provide necessary remediation action
• Perform exception reviews, due diligence activities and risk assessment when required
• Resolve technical security queries; research, investigate and provide control recommendations to address risk

Key Competencies

• Strong technical background across IT network technologies and protocols including TCP/IP, UDP, DNS, SMTP, PKI, etc.
• Strong understanding of security operations concepts – perimeter defense, insider threat, kill chain analysis, threat hunting, security metrics, MITRE ATT&CK framework
• Knowledge in collecting and analyzing Netflow & Firewall logs, IPS logs, OS security logs, PCAP, etc.
• Excellent written and verbal communication skills
• Can work effectively in a team environment or autonomously
• Experience in APT detection, EPP/EDR, anti-malware, vulnerability scanning, DLP, and threat intelligence tools
• Flexible to work in shifts to cover 24x7x365 on-call operations
• Ability to work under high pressure

Required Qualifications

Required Experience

Why Commercial Bank

• Best Performing Bank in Qatar in The Banker’s prestigious Top 1000 World Banks Rankings 2025.
• Best Digital Bank in the Middle East 2024 by World Finance and Best Mobile Banking App in the Middle East 2024 by Global Finance.
• An Innovation-Driven, Digital-First Environment where employees work with the latest tools and technologies to redefine banking
• Opportunities for Global Partnerships & International Exposure, connecting employees with global networks and perspectives.
• A focus on Employee Well-being & Work-Life Balance, ensuring a healthy and supportive environment for all team members
• Competitive Compensation & Benefits that ensure our employees are rewarded for their dedication and performance
• A strong Commitment to Diversity, Equity & Inclusion, fostering a culture that values every individual’s unique perspective
• At Commercial Bank, we don’t just offer careers, We shape futures by pioneering
• digital transformation
• in Qatar’s banking sector,
• blending digital-first
• approach to redefine banking through
• innovative solutions.

Disclaimer