SOC Manager

About the role

Requirements

• - Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or a related field.
• - 5–7 years of cybersecurity experience, with strong exposure to SOC operations and incident response.
• - Previous experience leading SOC activities, security operations, or technical teams.
• - Hands-on experience with Splunk, QRadar, Elastic, or similar SIEM platforms.
• - Strong knowledge of cyber threats, attack vectors, detection techniques, and defense strategies.
• - Strong understanding of incident response and digital forensics.
• - Familiarity with MITRE ATT&CK, threat intelligence, endpoint security, and network-security monitoring.
• - Strong leadership, analytical, communication, and stakeholder-management skills.
• - Ability to work full-time on-site in Riyadh.
• Preferred Certifications
• Relevant certifications such as:
• - GIAC Certified Incident Handler (GCIH)
• - GIAC Certified Intrusion Analyst (GCIA)
• - Certified Information Systems Security Professional (CISSP)
• - Certified Ethical Hacker (CEH)
• - Equivalent cybersecurity certifications

Responsibilities

• - Lead daily SOC operations, including security monitoring, alert triage, investigation, escalation, and incident response.
• - Manage, coach, and support SOC analysts while ensuring compliance with defined procedures and service levels.
• - Lead the investigation and response to major security incidents.
• - Work with SIEM platforms such as Splunk, QRadar, or Elastic.
• - Develop and improve detection rules, use cases, playbooks, and escalation procedures.
• - Conduct root-cause analysis and post-incident reviews.
• - Support digital forensics and evidence-handling activities.
• - Monitor emerging cyber threats, attack vectors, and adversary techniques.
• - Track SOC performance through SLAs, KPIs, and operational metrics.
• - Prepare incident, operational, and management reports.
• - Coordinate with clients and internal technical teams during security incidents.
• - Identify team development and training needs.

Skills

• Splunk
• QRadar
• Elastic
• SIEM
• Incident response
• Digital forensics
• MITRE ATT&CK
• Threat intelligence
• Endpoint security
• Network security monitoring
• Detection rules
• Playbooks
• Escalation procedures
• Stakeholder management
• Leadership