Senior SOC Lead: Advanced Incident Response

Experience; Muscat; On-site; OMR 12,000 - 18,000; Full time

Job summary

Experience is seeking a Senior Specialist SOC to lead advanced security event analysis, coordinate complex incident investigations, and drive continuous improvement of detection and response capabilities across SIEM, SOAR, and EDR.

As a Tier-3 analyst and technical SME, you will mentor junior staff, develop advanced use cases, and partner with threat intelligence and vulnerability teams to strengthen the organization’s proactive defense.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, or related discipline.
• Certifications such as GCIA, GCIH, CEH, CHFI, CompTIA CySA+, or SANS Threat Hunting preferred.
• Minimum 5–7 years in SOC operations or incident response, with at least 2 years in Tier-3 analysis or advanced forensics.

Responsibilities

• Lead advanced incident investigations across multiple security domains including network, endpoint, application, and cloud environments.
• Perform in-depth root cause analysis (RCA) and support major incident response and forensics as part of L3 escalation.
• Design and optimize detection logic and correlation rules within SIEM, SOAR, and EDR platforms.
• Develop automation playbooks to streamline triage and containment activities, reducing MTTD and MTTR.
• Conduct proactive threat hunting based on intelligence reports, behavioral analytics, and anomaly detection.
• Coordinate with internal and external threat intelligence sources to contextualize alerts and enhance detection maturity.
• Validate and integrate threat feeds and ensure enrichment of SOC alerting with contextual indicators (IOCs, TTPs, threat campaigns).

Skills

SOC management

Threat response

Governance

Customer reporting

Team leadership

Service management

Incident response

Forensics

Education

Bachelor's degree in IT / Cybersecurity

GCIA

GCIH

CEH

CHFI

CompTIA CySA+

SANS Threat Hunting

Job description

Experience is seeking a Senior Specialist SOC to lead advanced security event analysis, coordinate complex incident investigations, and drive continuous improvement of detection and response capabilities across SIEM, SOAR, and EDR.

As a Tier-3 analyst and technical SME, you will mentor junior staff, develop advanced use cases, and partner with threat intelligence and vulnerability teams to strengthen the organization’s proactive defense.