Senior SOC Specialist - Incident Response Lead

Oman Investment Authority; Muscat; On-site; OMR 24,000 - 36,000; Full time

Job summary

Oman Investment Authority seeks a Senior Specialist SOC to lead advanced security investigations and improve detection and response across on‑premises and cloud environments. You will guide junior analysts, develop use cases, and partner with threat intelligence to elevate proactive defense.

As a Tier-3 SME, you will design detection logic, review incident workflows, and drive continuous improvement, aligning with MITRE ATT&CK, NIST CSF and ISO 27035 frameworks.

Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, or related discipline.
• GCIA, GCIH, CEH, CHFI, CompTIA CySA+, or SANS Threat Hunting certifications preferred.
• Minimum 5–7 years in SOC operations or incident response, with at least 2 years in Tier-3 analysis or advanced forensics.
• Skills: SOC management, threat response, governance, customer reporting, team leadership, and service management.

Responsibilities

• Lead advanced incident investigations across multiple security domains including network, endpoint, application and cloud environments.
• Perform in-depth RCA and support major incident response and forensics as part of L3 escalation.
• Design and optimize detection logic and correlation rules within SIEM, SOAR and EDR platforms.
• Develop automation playbooks to streamline triage and containment activities reducing MTTD and MTTR.
• Conduct proactive threat hunting based on intelligence reports, behavioral analytics and anomaly detection.
• Coordinate with threat intelligence sources to contextualize alerts and enhance detection maturity.

Skills

SOC management

Threat response

Governance

Customer reporting

Team leadership

Service management

Education

Bachelor's degree in IT/Cybersecurity

GCIA

GCIH

CEH

CHFI

CompTIA CySA+

SANS Threat Hunting

Job description

Oman Investment Authority seeks a Senior Specialist SOC to lead advanced security investigations and improve detection and response across on‑premises and cloud environments. You will guide junior analysts, develop use cases, and partner with threat intelligence to elevate proactive defense.

As a Tier-3 SME, you will design detection logic, review incident workflows, and drive continuous improvement, aligning with MITRE ATT&CK, NIST CSF and ISO 27035 frameworks.