Incident Response (IR) Specialist

Job Description

• Experienced in identifying, containing, analyzing, and mitigating cybersecurity incidents across endpoints, networks, and cloud environments
  
• Skilled in malware analysis, log correlation, root cause analysis, and use of forensic and threat intelligence tools
  
• Proficient in SIEM, EDR, and scripting (e.g., Python, PowerShell) to support automated response and investigation
  
• Capable of creating and maintaining IR playbooks, escalation procedures, and response workflows
  
• Strong documentation skills and ability to coordinate across teams during and after incidents
  
• Certifications Preferred: GCIH, GCFA, CEH, or equivalent
  

Requirements

• Bachelor's degree in computer science, Information Technology or related Subject
  
• 8+ Years of related experiences
  
  

Requirements
5+ years of hands-on Siemens S7 experience — specifically S7-300 programming, diagnostics, and data block structure via Step 7 Classic or TIA Portal Profibus DP fluency — able to diagnose bus faults, read GSD device profiles, identify slave addresses, and recover from "MP Bus Blackout"-class faults without vendor support WinCC Flexible proficiency — able to navigate and extract tag configuration, alarm classes, and screen logic from an existing compiled WinCC Flexible project OPC UA implementation experience — via any of: Siemens Industrial PC OPC Server, KEPServerEX, open62541, or a Snap7-based Linux gateway solution Industrial networking — OT/IT convergence, unmanaged Profibus topology vs. managed Ethernet, VLAN design, and understanding of where IT security policy collides with OT real-time requirements Ability to independently read and produce electrical schematics, PLC I/O mapping sheets, drive parameter tables, and field device wiring diagrams Comfortable working on an active, high-visibility public-facing site in Qatar — able to obtain Qatar SafePass, site-specific HSE inductions, and work under the relevant site access protocols Fluent English — can write clear technical documentation and communicate directly with European OEM contractors, a remote software development team, and the client's facilities management team