Security Controls and Incident Response Engineer

About Commercial Bank of Qatar

Established in 1975 and based in Doha, Commercial Bank plays a key role in driving Qatar’s economic progress by delivering a wide range of personal, business, government, international, and investment banking services. The bank is committed to empowering its workforce, fostering career development, and creating an innovative, balanced work environment where staff are encouraged to realize their full potential.

Role Overview

The Security Controls and Incident Response Engineer will ensure the effectiveness and continuous improvement of security controls within the bank’s Security Operations Center (SOC). This role is crucial in bridging the governance of security controls with operational defense tasks by overseeing their implementation and validation, managing the incident response lifecycle, and maintaining alignment with regulatory standards and organizational frameworks.

Key Responsibilities

• Manage, execute, and monitor detective, preventive, and corrective security controls across SOC operations, guaranteeing they function properly and yield tangible evidence.
• Perform thorough control testing and assess their effectiveness, support Risk Control Self-Assessments (RCSA), and contribute to control documentation and evaluation.
• Identify shortcomings in current controls and recommend enhancements to align with regulations and standards such as ISO 27001 and NIST.
• Lead or assist in the entire incident response process including detection, alert validation, comprehensive analysis, containment measures, eradication, recovery, and post-incident review.
• Implement containment strategies like endpoint isolation, account suspensions, and blocking indicators of compromise (IOCs).
• Conduct root cause analysis and incident scoping; ensure critical incidents are escalated and communicated promptly.
• Collaborate with IT and business units for incident remediation and recovery coordination.
• Verify control performance during incidents, detect failures or weaknesses, and ensure controls are accurately captured in monitoring systems; aid in mapping controls to MITRE ATT&CK frameworks.
• Partner with SIEM engineering teams to validate and enhance detection use cases, address false positives, refine correlation and threshold rules, and escalate complex scenarios.
• Support and execute automation initiatives for response processes including SOAR workflows to ensure repeatability and scalability.
• Maintain comprehensive documentation of controls, incidents, and response protocols; generate reports on control effectiveness, incident patterns, and risk exposures.
• Assist with audits, regulatory compliance reviews, and control assurance activities.

Candidate Requirements

• A bachelor’s degree in Computer Engineering, Computer Science, or a related field.
• Minimum 5 to 8 years of professional experience in Security Operations Center roles, incident response, control management, or assurance.

Why Work with Commercial Bank?

• Recognized as the Best Digital Bank and Best Mobile Banking App in the Middle East in 2024 by global finance institutions.
• An innovation-driven and digital-first work culture with access to cutting-edge tools and technologies.
• Opportunities for international collaboration and global networking experiences.
• A supportive environment focused on employee well-being and work-life equilibrium.
• Competitive remuneration packages coupled with comprehensive benefits.
• A commitment to fostering diversity, equity, and inclusion in the workplace.

Additional Information

Only shortlisted candidates will be contacted for subsequent hiring stages. The bank reserves the right to modify, withdraw, or close this job listing at any time without prior notice.