SOC Development Lead: SIEM & Detection Architect

sirar by stc; Riyadh; On-site; SAR 150,000 - 230,000; Full time

Job summary

sirar by stc, an advanced cybersecurity company in Riyadh, is seeking a skilled SOC Development professional to lead end-to-end services across clients. You will own SIEM lifecycle, including onboarding, parsing, normalization, and use-case development, while ensuring performance, compliance, and audit readiness.

The role requires at least 5 years of relevant experience, with expertise in Splunk and Anomali, and strong engagement with stakeholders on cybersecurity strategy and threat detection

Qualifications

• Bachelor’s degree in cybersecurity, CS, IT, or related discipline.
• Master’s degree preferred.
• CISSP, CISA, SEC699, Splunk ES Admin, Splunk Developer, ThreatStream Admin 102 certifications listed.
• MITRE ATT&CK knowledge and threat-hunting experience.

Responsibilities

• Oversee end-to-end delivery of SOC Development services across customers, aligned with MSSP scope and SLAs.
• Own lifecycle of SIEM platforms (onboarding, parsing, normalization, use case development, reporting).
• Ensure SIEM infrastructure availability, performance, and integration reliability.
• Drive detection engineering maturity and MITRE ATT&CK coverage across use cases.
• Ensure deliverables meet compliance (NCA ECC) and audit readiness.
• Serve as primary escalation point for SOC Development issues impacting service delivery.
• Align SOC Development outputs with SOC Monitoring needs to enhance detection and response.

Job description

sirar by stc, an advanced cybersecurity company in Riyadh, is seeking a skilled SOC Development professional to lead end-to-end services across clients. You will own SIEM lifecycle, including onboarding, parsing, normalization, and use-case development, while ensuring performance, compliance, and audit readiness.

The role requires at least 5 years of relevant experience, with expertise in Splunk and Anomali, and strong engagement with stakeholders on cybersecurity strategy and threat detection