Summary
✨ AI‑Generated
Join a security operations function responsible for ensuring effective security controls and leading the detection, investigation, and response to security incidents. You will bridge governance and operational defense by validating controls, driving the detect-to-recover lifecycle, and helping ensure protective measures are properly designed and functioning.
Highlights
Opportunity to work at the intersection of security governance and operational defense. The role offers responsibility for security control effectiveness and the full incident response lifecycle, along with professional growth opportunities and a work-life balance focus.
Description
About Commercial Bank Of Qatar
Commercial Bank, founded in 1975 and headquartered in Doha, plays a vital role in Qatar’s economic development by offering a range of personal, business, government, international and investment services.
We believe in empowering our employees, providing them with opportunities for growth and professional development.
By Joining us, you’ll be part of a workplace culture that fosters innovation, supports work-life balance, and encourages you to reach your full potential.
Join us in shaping the future of banking!
Job Summary
The Security Controls & Incident Response Engineer is responsible for ensuring the effectiveness of security controls and leading incident detection, investigation, and response activities.
This Role Bridges Control Governance And Operational Defence By
Owning execution and validation of detective and corrective controls
Driving incident response lifecycle (detect → respond → recover)
Ensuring controls are designed, operating, and continuously improved
The role ensures that security controls effectively mitigate risk and perform as expected during real incidents, aligning with enterprise control frameworks and incident management practices.
Responsibilities
Security Controls Management
Execute and monitor security controls (detective, preventive, corrective) across the SOC
Validate that controls are: Properly implemented, operating effectively and producing measurable evidence
Perform control testing and effectiveness reviews
Support RCSA activities, including control documentation and assessment
Identify gaps in control coverage and recommend improvements
Ensure controls align with regulatory and internal frameworks (ISO 27001, NIST, etc.)
Incident Detection & Response
Lead Or Support The Full Incident Response Lifecycle
Detection and alert validation
Investigation and analysis
Containment and eradication
Recovery and post-incident review
Execute containment actions (e.g., endpoint isolation, account suspension, blocking IOCs)
Perform root cause analysis and incident scoping
Ensure timely escalation and communication of critical incidents
Coordinate with IT and business teams for remediation and recovery
Control Effectiveness Through Incidents
Validate that security controls perform correctly during incidents
Identify control failures or weaknesses exposed during incidents
Ensure controls are properly reflected in monitoring systems
Contribute to mapping controls to MITRE ATT&CK techniques
Detection & Monitoring Alignment
Work with SIEM engineering team to validate use-cases and improve detection quality
Provide feedback on false positives, detection gaps and improvements
Assist in refining correlation rules and thresholds
Escalate complex incidents to senior engineers
Automation & Response Enablement
Execute and support automated response workflows (SOAR)
Identify opportunities to automate
Ensure repeatable and scalable response processes
Governance, Reporting & Compliance
Maintain documentation for: Controls, Incidents, Response procedures
Produce reports on: Control effectiveness, incident trends, risk exposures
Support audit, regulatory reviews, and control assurance activities
Requirements
Required Qualifications:
Degree in Computer Engineering, Computer Science, or equivalent
Required Experience
5-8 years in SOC / Incident Response / Control Management or Assurance roles
Why Commercial Bank?
Best Digital Bank in the Middle East 2024 by World Finance and Best Mobile Banking App in the Middle East 2024 by Global Finance.
An Innovation-Driven, Digital-First Environment where employees work with the latest tools and technologies to redefine banking Opportunities for Global Partnerships & International Exposure, connecting employees with global networks and perspectives.
A focus on Employee Well-being & Work-Life Balance, ensuring a healthy and supportive environment for all team members Competitive Compensation & Benefits that ensure our employees are rewarded for their dedication and performance A strong Commitment to Diversity, Equity & Inclusion, fostering a culture that values every individual’s unique perspective.
At Commercial Bank, we don’t just offer careers, We shape futures by pioneering digital transformation in Qatar’s banking sector, blending digital-first approach to redefine banking through innovative solutions.
Disclaimer
We appreciate your interest in joining CBQ! Please note that only selected candidates will be contacted for further steps in the hiring process.
This job posting is for informational purposes only, and CBQ reserves the right to modify, withdraw, or close it at any time without notice.