Senior Cybersecurity Lead

NTG; Muscat; On-site; OMR 20,000 - 30,000; Full time

Job summary

NTG is hiring a Senior Cybersecurity Lead in Muscat to oversee security operations for a national platform. You will lead threat detection, response, and proactive hunting in a zero trust environment, ensuring data protection and compliance.

The ideal candidate has significant experience in incident response and detection engineering, with a strong technical background in SIEM, SOAR, and EDR. A Bachelor's degree in Computer Science or Cybersecurity is required, and strong communication skills are essential.

Qualifications

• Led security operations or incident response for systems under threat.
• Hands-on experience with SIEM, SOAR, EDR, and detection engineering.
• Proven ability to run real incidents and improve the program.

Responsibilities

• Lead security operations for detection, hunting, and incident response.
• Build detection engineering rules and analytics.
• Automate response processes to enhance efficiency.

Skills

Incident response leadership

Detection engineering

Threat hunting

Understanding of ISO 27001 and NIST

Hands-on with SIEM and SOAR

Communication skills

Risk management

Education

Bachelor's in Computer Science or Cybersecurity

Tools

SIEM

SOAR

EDR

Job description

Lead the defense of a platform millions trust, owning detection, response, and threat hunting across a sovereign, zero trust environment.

RQMNA defends the sovereign platforms millions trust with their most sensitive data.

We are hiring a Senior Cybersecurity Lead, on site in Muscat, to lead detection, response, and threat hunting for a national platform.

What you'll do

Lead the security operations that detect, hunt, and shut down threats before they reach citizens' data.

Key Responsibilities

• Lead security operations: monitoring, detection, and incident response across a sovereign, multitenant platform
• Build and tune detection engineering: rules, analytics, and use cases across SIEM and SOAR
• Run incident response end to end, from triage to containment, eradication, and lessons learned
• Drive proactive threat hunting and threat intelligence, and feed it back into the defenses
• Automate response with SOAR playbooks to cut mean time to detect and respond
• Lead red and purple team exercises, and turn findings into hardening
• Align operations to data protection law, ISO 27001, and NIST, with audit ready evidence
• Lead, mentor, and grow the security operations team, and own escalation and on call

What makes you a fit

• You have led security operations or incident response for systems that were genuinely under threat
• You think like an attacker and build detection that catches them
• You are hands on with SIEM, SOAR, EDR, and detection engineering, not just dashboards
• You have run real incidents under pressure, and made the program better afterward
• You turn frameworks like ISO 27001 and NIST into operational controls and evidence
• You hold a Bachelor's or higher in Computer Science, Cybersecurity, or a related field; offensive or defensive security certifications are a plus
• You lead calmly, communicate risk clearly, and grow the people around you
• Bonus points for government, critical national infrastructure, or sovereign environments
• Fluent English required; Arabic is a valuable advantage

If you would rather hunt the threat than read about the breach, lead it here. Apply.

#CyberSecurity #SOC #IncidentResponse #ThreatHunting #Hiring