SOC Lead

Intertec Softwares; Dubai; On-site; AED 300,000 - 600,000; Full time

Job summary

Intertec Softwares in Dubai seeks an experienced SOC Lead to drive 24/7 security operations, lead onshore and offshore teams, and ensure continuous monitoring and incident response. You will spearhead threat hunting, investigations and post-incident reviews, while building mature SOC processes, playbooks, and detections aligned with NIST CSF ISO 27001 and PCI DSS.

Collaborating with GRC and auditors, you will oversee SIEM/XDR/EDR/NDR/CSPM integrations, cloud security across Azure, GCP and OCI,

Qualifications

• 8+ years in cybersecurity with SOC leadership/incident response experience.
• Strong background in SOC operations, incident management and threat hunting.
• Deep knowledge of SIEM, XDR, EDR, NDR, CSPM and related security domains.
• Experience in cloud security across Azure, GCP and Oracle Cloud.

Responsibilities

• Lead and manage a 24/7 SOC team (onshore and offshore) ensuring monitoring, incident response and continuous improvement.
• Drive proactive threat hunting, investigations end-to-end, containment, remediation and post-incident reviews.
• Develop SOC processes, playbooks and detection use cases aligned with NIST CSF, ISO 27001 and PCI DSS.
• Partner with GRC/internal audit to ensure evidence readiness, audit compliance and risk mitigation.
• Oversee SIEM/XDR/EDR/NDR/CSPM and cloud-native security integrations; optimize log onboarding and automation.
• Manage SOC visibility across multi-cloud platforms (Azure, GCP, OCI).
• Engage stakeholders; translate incidents into business impact and provide actionable reporting.
• Mentor SOC analysts; build certification and training roadmaps for a high-performance team.

Skills

SOC Leadership

Incident Response

Threat Hunting

Cloud Security

SIEM

Compliance

GRC

Stakeholder Engagement

Communication

Tools

SIEM

XDR

EDR

NDR

CSPM

Azure

GCP

OCI

Job description

JOB Title: SOC Lead

Experience: 8

Certification:

• CompTIA CySA / Security / CEH


• Splunk Core Certified User / Power User


• Microsoft AZ-500 / SC-200


• CrowdStrike Certified Falcon Responder (CFR)

Responsibilities :

• SOC Leadership & Operations: Lead and manage a 24/7 SOC team (onshore and offshore) ensuring efficient monitoring incident response and continuous improvement.


• Threat Hunting & Incident Response: Drive proactive threat hunting lead investigations end-to-end and oversee containment remediation and post-incident reviews.


• Process Building & Maturity: Develop SOC processes playbooks and detection use cases aligned with NIST CSF ISO 27001 and PCI DSS. Identify operational gaps and implement improvements.


• Audit & Compliance Support: Partner with GRC internal audit and external auditors to ensure evidence readiness audit compliance and risk mitigation.


• Technology & Integration: Oversee SIEM XDR EDR NDR CSPM and cloud-native security integrations. Ensure effective log onboarding tool rationalization and automation to maximize efficiency.


• Cloud Security: Manage SOC visibility across multi-cloud platforms (Azure GCP OCI). Build detection and monitoring use cases for cloud-native workloads.


• Stakeholder Engagement: Act as a trusted advisor to business IT and compliance stakeholders. Translate technical incidents into business impact and provide actionable reporting.


• People Development: Mentor SOC analysts across levels create structured certification and training roadmaps and build a high-performance team culture

Mandatory:

• 812 years in cybersecurity with 4 years in SOC leadership/incident response management.


• Strong background in SOC operations incident management and threat hunting.


• Deep knowledge of SIEM XDR EDR NDR CSPM and related security domains (not vendor-specific).


• Experience in cloud security across Azure GCP and Oracle Cloud.


• Strong understanding of NIST CSF ISO 27001 and PCI DSS frameworks.


• Practical knowledge on SOC-CMM model.


• Proven ability to handle audits compliance requirements and board-level reporting.


• High resilience and ownership mindset; thrives under pressure and ambiguity.


• Excellent communication skills and ability to engage with diverse stakeholders.


• Certifications such as CISSP CISM or equivalent are highly desirable.