Senior Associate - Threat and Vulnerability Management

We are seeking a highly skilled and experienced Threat and Vulnerability Management Senior Associate to join a leading organization in Qatar. This role is central to strengthening and maintaining the cybersecurity posture by designing, implementing, and monitoring critical security controls and systems.

Reporting to the Cyber Defense Manager, you will play a pivotal part in identifying, managing, and responding to threats and vulnerabilities, ensuring the organization’s digital assets are well-protected.

Key Responsibilities:

• Design, implement, and maintain security controls including firewalls, IDS/IPS, and SIEM solutions.
• Configure and tune security systems for optimal performance.
• Monitor and analyze security data to detect and assess potential threats.
• Lead or support incident response activities and post-incident analysis.
• Stay updated on new attack vectors, emerging technologies, and recommend new controls.
• Collaborate with incident response, forensics, and threat intelligence teams.
• Participate in internal/external audits and security assessments.
• Maintain the full lifecycle of security controls, including upgrades and patches.
• Generate regular reports for management on threat posture and system effectiveness.
• Proactively identify gaps and drive improvement initiatives in cyber defense capabilities.

Key Performance Indicators:

• Mean Time to Detect and Respond (MTTD/MTTR)
• Business impact of security incidents (qualitative)

Required Qualifications & Experience:

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• Experience working in mature markets (Europe, SEA) is a must.
• 8+ years of experience in security controls implementation and threat management.
• Industry certifications such as CCNA Security, CompTIA Security+, CISSP, or equivalent.

Technical Skills & Knowledge:

• In-depth knowledge of ISO 27001, NIST, OWASP, and other global/local security frameworks.
• Experience with SASE, SOAR, and advanced threat detection technologies.
• Solid understanding of risk management, security governance, and regulatory compliance.
• Familiarity with project management practices and tools.
• Strong analytical and reporting skills with ability to present technical concepts to non-technical stakeholders.