Job Description

Company
QatarEnergy is a state-owned public corporation established byEmiri Decree No. 10 in 1974. It is responsible for all phases
of the oiland gas industry in the State of Qatar.The principal activities of QatarEnergy, its subsidiaries and jointventures are
the exploration, production, local and international saleof crude oil,natural gas and gas liquids, refined products,
syntheticfuels,petrochemicals, fuel additives, fertilizers, liquefied natural gas(LNG), steel and aluminium.Qatar Energy's
strategy of conducting hydrocarbon exploration anddevelopment is through Exploration and Production Sharing
Agreements(EPSA) and Development and Production Sharing Agreements (DPSA)concluded with major international oil
and gas companies.The operations and activities of QatarEnergy and its affiliates areconducted atvarious onshore
locations, including Doha, Dukhan and the Mesaieed andRas Laffan Industrial Cities, as well as offshore areas, including
HalulIsland, offshore production stations, drilling platforms and the NorthField.Thriving on a spirit of enterprise, each of our
joint ventures isunderpinned by transparency, innovation and high standards of qualityand service. At QatarEnergy, we are
committed to one thing aboveall: Excellence.
Department
INFORMATION & COMMUNICATION TECHNOLOGY
Primary purpose of job
QatarEnergy is looking to recruit a Systems Engineer (Infrastructure Security) that will join a team responsible for overall
preservation of information confidentiality, integrity, and availability of the ICT systems that supports business operations in
coordination with the Sr. System Engineer and Team Lead.
The new member is required to support and maintain the day-to-day security operations and system change lifecycle of
critical security systems & services. The engineer shall provide technical support for selected security devices and services.
The role will be an enabler to the company's success through development and implementation of security practices that
create a secure working environment.
Experience & Skills

• Five or more years of demonstrated experience in IT security operations function.
• Identify security gaps and design and implement security controls in line with QatarEnergy security policies in close

coordination with the senior engineer and team lead to ensure information security consistency and compliance.

• Implement and manage application system security controls such as application whitelisting, Advanced Threat Prevention,

Antivirus, host-based firewall/IPS, encryption and device controls.

• Implement and manage cloud security functions for MS Azure, Amazon AWS, and Google GCP.
• Implement and manage Data classification and DLP solutions.
• Implement and manage Public Key Infrastructure and HSM solutions.
• Implement security controls in line with QatarEnergy security policies and in close coordination with senior systems

engineers to ensure information security consistency and compliance.

• Familiarity with current information security best practices and standards such as ISO and NIST.
• Strong troubleshooting skills in network, systems, etc.
• Analyze requests and incidents from QatarEnergy staff and provide solution based on the QatarEnergy Cyber Information

Security Framework.

• Provide information security guidance to QatarEnergy lines of business in the assessment and development of new

business process and related IT processes.

• Develop, review, and maintain technical documentation (High-Level Designs) for security systems.
• Develop and create processes and procedures in compliance with QatarEnergy security policies and internationally

recognized security frameworks and standards such as ISO and NIST.

• Extensive technical knowledge with the latest security solutions and threat vectors.
• Has multitasking, problem solving, and strong analytics skills.
• Has solid project management skills that will lead to serving security requirements and obtain information about solutions

and successful delivery.

• Has presentation skills that will gain acceptance of proposed solution from impacted stakeholders
• Proficiency in written and spoken English.

Education

• Bachelor's degree in a relevant field.
• Recognized information security certification such as CISSP, CCIE, or equivalent.
• Certification in Microsoft Azure and AWS security is a plus.