Security Operations Manager

About the Job:
The Security Operations Lead is responsible for leading the organization's Security Operations Center (SOC) and ensuring effective monitoring, detection, investigation, and response to cybersecurity threats. This role oversees security analysts, drives continuous improvement of security processes, manages security technologies, and works closely with IT, infrastructure, and business stakeholders to strengthen the organization's overall security posture.

Key Responsibilities:

• Lead and manage daily SOC activities.
• Supervise, mentor, and develop Tier 1, Tier 2, and Tier 3 security analysts.
• Monitor security alerts and incidents for timely investigation and resolution.
• Lead incident response activities including containment, eradication, recovery, and post-incident reviews.
• Develop and maintain incident response playbooks and standard operating procedures (SOPs).
• Coordinate investigations with internal teams and external partners.
• Oversee the operation and optimization of security platforms (e.g., SIEM, EDR/XDR, SOAR, IDS/IPS).
• Produce security metrics, dashboards, and executive reports on SOC performance.
• Ensure compliance with security policies and regulatory requirements.
• Stay current with emerging cyber threats and security technologies.

Required Qualifications:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 7+ years of experience in cybersecurity with at least 3 years in a leadership or senior SOC role.
• Strong understanding of SOC processes, incident response, threat intelligence, and threat hunting.
• Hands-on experience with SIEM platforms (e.g., Splunk, Elastic Security).
• Strong knowledge of Windows, Linux, cloud security (AWS, Azure), and networking fundamentals.

Preferred Certifications:

• CISSP, GCIA, GCIH, GCFA, CEH, CompTIA Security+, and relevant SIEM certifications.

Location and Work Conditions:
On-site, Full-time in Jeddah, Makkah, Saudi Arabia.