Senior SOC & DFIR Lead — Threat Hunting & IR

Ernst & Young Advisory Services Sdn Bhd; Riyadh; On-site; SAR 300,000 - 400,000; Full time

Job summary

A global consulting firm is seeking a Senior SOC Manager in Riyadh to lead Managed SOC operations and Digital Forensics & Incident Response. The ideal candidate will have 8–10 years of experience in SOC leadership or DFIR roles, with expertise in incident response and forensic analysis. Certifications such as GCFA or GCIH are mandatory. This role ensures effective threat detection and incident handling, requiring strong technical leadership.

Qualifications

• 8–10 years in SOC leadership or DFIR roles.
• Hands-on with incident response, malware analysis, SIEM triage.
• Experience with forensic tools.

Responsibilities

• Oversee SOC operations across L1, L2, and L3 tiers.
• Define alert thresholds, escalation matrices, and incident runbooks.
• Coordinate threat hunts and root cause analysis (RCA).
• Manage DFIR tooling and evidence handling procedures.
• Liaise with vendors for out-of-hours incident support.

Skills

SOC leadership

Incident response

Malware analysis

SIEM triage

Forensic analysis

Education

Certifications: GCFA, GCIH, or equivalent

Tools

FTK

EnCase

Job description

A global consulting firm is seeking a Senior SOC Manager in Riyadh to lead Managed SOC operations and Digital Forensics & Incident Response. The ideal candidate will have 8–10 years of experience in SOC leadership or DFIR roles, with expertise in incident response and forensic analysis. Certifications such as GCFA or GCIH are mandatory. This role ensures effective threat detection and incident handling, requiring strong technical leadership.