SOC Manager📣 Job Ad

About ******* and the SOC Manager Role

******* is seeking a SOC Manager to lead Security Operations Center activities. This full-time, on-site position in Riyadh, Saudi Arabia, focuses on strengthening threat detection and incident-response capabilities, ensuring the effective delivery of SOC services. The role requires a combination of hands-on cybersecurity expertise with strong leadership, stakeholder management, and operational reporting skills.

Key Responsibilities

• Lead daily SOC operations, including security monitoring, alert triage, investigation, escalation, and incident response.
• Manage, coach, and support SOC analysts while ensuring compliance with defined procedures and service levels.
• Lead the investigation and response to major security incidents.
• Work with SIEM platforms such as Splunk, QRadar, or Elastic.
• Develop and improve detection rules, use cases, playbooks, and escalation procedures.
• Conduct root-cause analysis and post-incident reviews.
• Support digital forensics and evidence-handling activities.
• Monitor emerging cyber threats, attack vectors, and adversary techniques.
• Track SOC performance through SLAs, KPIs, and operational metrics.
• Prepare incident, operational, and management reports.
• Coordinate with clients and internal technical teams during security incidents.
• Identify team development and training needs.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or a related field.
• 5-7 years of cybersecurity experience, with strong exposure to SOC operations and incident response.
• Previous experience leading SOC activities, security operations, or technical teams.

Essential Skills and Technical Experience

• Hands-on experience with Splunk, QRadar, Elastic, or similar SIEM platforms.
• Strong knowledge of cyber threats, attack vectors, detection techniques, and defense strategies.
• Strong understanding of incident response and digital forensics.
• Familiarity with MITRE ATT&CK, threat intelligence, endpoint security, and network-security monitoring.
• Strong leadership, analytical, communication, and stakeholder-management skills.

Preferred Certifications

Relevant certifications are preferred, including but not limited to:

• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Intrusion Analyst (GCIA)
• Certified Information Systems Security Professional (CISSP)
• Certified Ethical Hacker (CEH)
• Equivalent cybersecurity certifications

Work Environment

This position requires the ability to work full-time on-site in Riyadh, Saudi Arabia.