Senior SOC Manager - Incident Response & Threat Detection

Managed; Riyadh; On-site; SAR 240,000 - 360,000; Full time

Job summary

Managed.sa is seeking an experienced SOC Manager to lead Security Operations Center activities, strengthen threat detection and incident-response capabilities, and ensure the effective delivery of SOC services.

The ideal candidate combines hands-on cybersecurity expertise with strong leadership, stakeholder management, and operational reporting skills. This role requires full-time on-site work in Riyadh and relevant certifications are preferred.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or a related field.
• 5-7 years of cybersecurity experience, with strong exposure to SOC operations and incident response.
• Proven experience leading SOC activities or security operations teams.
• Hands-on with SIEM platforms (Splunk, QRadar, Elastic) and threat detection.
• Strong leadership, communication, and stakeholder-management skills.
• Willingness to work full-time on-site in Riyadh.

Responsibilities

• Lead daily SOC operations, monitoring, alert triage, investigation, escalation, and incident response.
• Manage, coach, and support SOC analysts while ensuring procedures and SLAs.
• Lead investigation and response to major security incidents.
• Work with SIEM platforms such as Splunk, QRadar, or Elastic.
• Develop and improve detection rules, playbooks, and escalation procedures.
• Conduct root-cause analysis and post-incident reviews.
• Coordinate with clients and internal teams during incidents.
• Identify training needs and support team development.
• Prepare incident, operational, and management reports.

Skills

Leadership

Incident response

Threat detection

Stakeholder management

Communication

Analytical skills

Education

Bachelor's degree in Cybersecurity or related field

Tools

Splunk

QRadar

Elastic

Job description

Managed.sa is seeking an experienced SOC Manager to lead Security Operations Center activities, strengthen threat detection and incident-response capabilities, and ensure the effective delivery of SOC services.

The ideal candidate combines hands-on cybersecurity expertise with strong leadership, stakeholder management, and operational reporting skills. This role requires full-time on-site work in Riyadh and relevant certifications are preferred.