Managed Services
SOC Manager
full timeleadRiyadh, Saudi Arabia1 months ago
24,500-44,100 AED/mo
Engineering & TechnologyJob Description
Managed.sa is seeking an experienced SOC Manager to lead Security Operations Center activities, strengthen threat detection and incident-response capabilities, and ensure the effective delivery of SOC services. The ideal candidate combines hands-on cybersecurity expertise with strong leadership, stakeholder management, and operational reporting skills. Key Responsibilities - Lead daily SOC operations, including security monitoring, alert triage, investigation, escalation, and incident response. - Manage, coach, and support SOC analysts while ensuring compliance with defined procedures and service levels. - Lead the investigation and response to major security incidents. - Work with SIEM platforms such as Splunk, QRadar, or Elastic. - Develop and improve detection rules, use cases, playbooks, and escalation procedures. - Conduct root-cause analysis and post-incident reviews. - Support digital forensics and evidence-handling activities. - Monitor emerging cyber threats, attack vectors, and adversary techniques. - Track SOC performance through SLAs, KPIs, and operational metrics. - Prepare incident, operational, and management reports. - Coordinate with clients and internal technical teams during security incidents. - Identify team development and training needs.
Requirements
- - Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or a related field.
- - 5–7 years of cybersecurity experience, with strong exposure to SOC operations and incident response.
- - Previous experience leading SOC activities, security operations, or technical teams.
- - Hands-on experience with Splunk, QRadar, Elastic, or similar SIEM platforms.
- - Strong knowledge of cyber threats, attack vectors, detection techniques, and defense strategies.
- - Strong understanding of incident response and digital forensics.
- - Familiarity with MITRE ATT&CK, threat intelligence, endpoint security, and network-security monitoring.
- - Strong leadership, analytical, communication, and stakeholder-management skills.
- - Ability to work full-time on-site in Riyadh.
- Preferred Certifications
- Relevant certifications such as:
- - GIAC Certified Incident Handler (GCIH)
- - GIAC Certified Intrusion Analyst (GCIA)
- - Certified Information Systems Security Professional (CISSP)
- - Certified Ethical Hacker (CEH)
- - Equivalent cybersecurity certifications
Responsibilities
- - Lead daily SOC operations, including security monitoring, alert triage, investigation, escalation, and incident response.
- - Manage, coach, and support SOC analysts while ensuring compliance with defined procedures and service levels.
- - Lead the investigation and response to major security incidents.
- - Work with SIEM platforms such as Splunk, QRadar, or Elastic.
- - Develop and improve detection rules, use cases, playbooks, and escalation procedures.
- - Conduct root-cause analysis and post-incident reviews.
- - Support digital forensics and evidence-handling activities.
- - Monitor emerging cyber threats, attack vectors, and adversary techniques.
- - Track SOC performance through SLAs, KPIs, and operational metrics.
- - Prepare incident, operational, and management reports.
- - Coordinate with clients and internal technical teams during security incidents.
- - Identify team development and training needs.
Skills Required
SplunkQRadarElasticSIEMIncident responseDigital forensicsMITRE ATT&CKThreat intelligenceEndpoint securityNetwork security monitoringDetection rulesPlaybooksEscalation proceduresStakeholder managementLeadership