Incident Response Specialist

Job Description

• Proven experience in detecting, analyzing, and responding to security incidents across endpoints, networks, and cloud environments.
  
• Skilled in root cause analysis, malware investigation, log correlation, and use of threat intelligence platforms.
  
• Proficient in SIEM, EDR, forensic tools, and scripting (e.g., Python, PowerShell) for automation and investigation.
  
• Ability to develop and maintain IR playbooks, escalation procedures, and response workflows.
  
• Strong documentation skills and ability to coordinate with internal teams and external stakeholders during incidents.
  
• GCIH, GCFA, CEH, or equivalent.
  
  

Requirements

• Bachelor's degree in computer science, Information Technology or related Subject
  
• 8+ Years of related experiences
  
  

Requirements
5+ years of hands-on Siemens S7 experience — specifically S7-300 programming, diagnostics, and data block structure via Step 7 Classic or TIA Portal Profibus DP fluency — able to diagnose bus faults, read GSD device profiles, identify slave addresses, and recover from "MP Bus Blackout"-class faults without vendor support WinCC Flexible proficiency — able to navigate and extract tag configuration, alarm classes, and screen logic from an existing compiled WinCC Flexible project OPC UA implementation experience — via any of: Siemens Industrial PC OPC Server, KEPServerEX, open62541, or a Snap7-based Linux gateway solution Industrial networking — OT/IT convergence, unmanaged Profibus topology vs. managed Ethernet, VLAN design, and understanding of where IT security policy collides with OT real-time requirements Ability to independently read and produce electrical schematics, PLC I/O mapping sheets, drive parameter tables, and field device wiring diagrams Comfortable working on an active, high-visibility public-facing site in Qatar — able to obtain Qatar SafePass, site-specific HSE inductions, and work under the relevant site access protocols Fluent English — can write clear technical documentation and communicate directly with European OEM contractors, a remote software development team, and the client's facilities management team