Security Analyst

🌍 Remote

Full-time

IT & Security

Application sent!

We will reach you out in a few days

Oops! Something went wrong while submitting the form.

Apply

About the company

We are Qatar Insurance Company (QIC), the leading insurance provider in GCC. With a history dating back to 1964, we have established ourselves as a pioneer in the insurance industry, offering innovative solutions to meet the diverse needs of individuals and businesses.

Our vision is to make QIC group become first Digital Ecosystem in the region by combining insurance and non-insurance services in one platform. Through our digital platforms, such as qic.online and the QD app (Qatar Digital), we empower customers to manage their needs anytime and anywhere.

Our employees have been featured in Forbes 30 under 30, teach at online universities, serve on program committees of major IT conferences, and have previously worked at Yandex, Tinkoff, Avito, Ozon, and other leading tech companies.

Join us as an Information Security Analyst to play a key role in protecting our data and systems. You’ll develop and maintain Information Security (IS) documentation, conduct risk analyses, and create and update threat models for products. This role also includes overseeing Identity and Access Management (IAM), preparing reports for the Cyber Security team, and supporting incident investigations.

About the position

Responsibilities

Develop and maintain internal Information Security (IS) documentation, including procedures, requirements, and instructions.
Conduct regular risk analysis for applications in use, identifying and managing potential IS risks.
Create and update threat models and attack vectors for products under development.
Ensure effective Identity and Access Management (IAM), including annual access reviews and updates, while Helpdesk manages access provisioning.
Prepare reports and documentation for the Cyber Security team to support organizational security initiatives.
Assist in IS incident investigations.
Increase awareness of IS best practices among developers and other employees.

‍

Requirements

Proven experience in threat modeling, formulating attack vectors, and assessing risks.
Ability to analyze and document data flow in existing information systems.
Familiarity with modern web application architectures and secure development best practices.
Knowledge of security standards and frameworks: ISO 27x, GDPR, NIST 800x, OWASP, CWE, etc.
Strong understanding of IAM principles and access control management.

Conditions

What we offer

Long-term service agreement contract with QIC with 3 months probation period
Group and Individual English language classes
We are diverse — our digital nomads work remotely from 20+ different countries
Payment in US dollars monthly to your bank account using SWIFT
Full-time remote, work schedule: 5 days per week, Sunday to Thursday, GMT +3 timezone
Vacation policy: Qatar Holiday Calendar, 20 days of vacation, and 10 sick-day-offs
Performance reviews are conducted twice a year, with the possibility of a raise in March and September
Potential opportunity to apply for a Qatar ID and relocation to Doha, Qatar