Job description

Cyber incidents test how well people, processes and tools respond under pressure, and this EY position in Doha helps clients rehearse that response before it is needed. Exercises are planned, coordinated and run with client cybersecurity teams, technology vendors and project teams. Realistic scenarios sit at the heart of each exercise, drawing on threat intelligence and the MITRE ATT&CK framework. Research into SOC platforms, incident response solutions, threat intelligence tools and leading practice keeps recommendations current. Security monitoring, detection and response technologies such as SIEM and EDR need a solid working understanding. Workshops, training sessions and stakeholder meetings are facilitated by you, and complex technical ideas have to land clearly with non-technical audiences. Reports, presentations and lessons-learned documents follow each activity, supporting knowledge transfer to client teams. At least 10 years in cybersecurity is required, ideally including SOC, incident response or red team work. Arabic speakers are strongly preferred, and certifications such as CISSP, CEH, GIAC or CISM will help.