Senior Threat Detection Engineer: Lead SOC & ESOP

COGNNA; As Sudiyah; On-site; OMR 18,000 - 30,000; Full time

Benefits offered by this job

ESOP program

Certifications and trainings

On-site Almadina office

Job summary

COGNNA is seeking a Threat Detection Engineer to design high-impact detection strategies, automate detection, and elevate SOC operations within our Almadina office. You will mentor talent and collaborate across threat intel, incident response, and platform engineering to strengthen detection capabilities.

Join us to advance SOC maturity, implement scalable detection, and contribute to post-incident analyses while staying ahead of evolving threats.

Qualifications

• Bachelor’s in Computer Science, Cybersecurity, or related field.
• Minimum 3 years of experience developing complex detection use cases.
• Strong understanding of attacker behavior, IR fundamentals, and digital forensics.
• Experience turning threat intel into actionable detection logic.

Responsibilities

• Build high-fidelity correlation rules and behavioral detections.
• Translate MITRE ATT&CK into actionable detection logic.
• Lead architecture and optimization of SIEM/EDR/SOC stacks for scale.
• Automate detection testing and maintain detection quality.
• Mentor rising cyber talent and evolve SOC maturity.
• Collaborate with intel and IR teams on hunts.

Skills

Threat detection expertise

Incident response fundamentals

Digital forensics

Mentorship

English & Arabic communication

Education

Bachelor's in Computer Science or Cybersecurity

Tools

SIEM platforms (Splunk, QRadar)

EDR tools

Wireshark / Network analysis

Python / PowerShell scripting

Windows/Linux/macOS logging

Threat intel integration

Cloud security monitoring

Job description

COGNNA is seeking a Threat Detection Engineer to design high-impact detection strategies, automate detection, and elevate SOC operations within our Almadina office. You will mentor talent and collaborate across threat intel, incident response, and platform engineering to strengthen detection capabilities.

Join us to advance SOC maturity, implement scalable detection, and contribute to post-incident analyses while staying ahead of evolving threats.