Senior SOC Manager – Incident Response & Threat Detection

Managed Services; Riyadh; On-site; SAR 240,000 - 360,000; Full time

Job summary

Managed.sa seeks an experienced SOC Manager to lead Security Operations Center activities, strengthen threat detection and incident-response capabilities, and ensure the effective delivery of SOC services.

The ideal candidate combines hands-on cybersecurity expertise with strong leadership, stakeholder management, and operational reporting skills. This role requires full-time on-site work in Riyadh, with preferred certifications and a track record in SOC leadership.

Qualifications

• 5-7 years of cybersecurity experience with strong exposure to SOC operations and incident response.
• Hands-on experience leading SOC activities, security operations, or technical teams.
• Experience with SIEM platforms such as Splunk, QRadar, or Elastic.
• Strong knowledge of cyber threats, attack vectors, detection techniques, and defense strategies.
• Familiarity with MITRE ATT&CK, threat intelligence, endpoint security, and network-security monitoring.

Responsibilities

• Lead daily SOC operations including security monitoring, alert triage, investigation, escalation, and incident response.
• Manage, coach, and support SOC analysts while ensuring compliance with procedures and SLAs.
• Lead investigation and response to major security incidents.
• Develop and improve detection rules, use cases, playbooks, and escalation procedures.
• Coordinate with clients and internal teams during security incidents.

Skills

SOC operations

Incident response

Leadership

Stakeholder management

Communication

SIEM proficiency

Education

Bachelor's degree in Cybersecurity / Information Security / Computer Science

Tools

Splunk

QRadar

Elastic

Job description

Managed.sa seeks an experienced SOC Manager to lead Security Operations Center activities, strengthen threat detection and incident-response capabilities, and ensure the effective delivery of SOC services.

The ideal candidate combines hands-on cybersecurity expertise with strong leadership, stakeholder management, and operational reporting skills. This role requires full-time on-site work in Riyadh, with preferred certifications and a track record in SOC leadership.