SOC Development Lead: SIEM & Detection Engineering

sirar by stc; Saudi Arabia; On-site; SAR 250,000 - 450,000; Full time

Job summary

sirar by stc is seeking an experienced SOC Development professional to lead end-to-end delivery for MSSP services in the Saudi market. You will own the SIEM lifecycle, including onboarding, parsing, normalization, and use case development, while ensuring performance and compliance across multiple customer environments.

The role requires strong incident handling skills, advanced Splunk/Anomali experience, and a fit for a dynamic MSSP environment focused on continuous detection improvement.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline.

Responsibilities

• End-to-end delivery of SOC Development services across customers.
• Own lifecycle of SIEM platforms (onboarding, parsing, normalization, use case development, reporting).
• Ensure availability, performance, and integrity of SIEM infrastructure and integrations.
• Drive detection engineering maturity and MITRE ATT&CK coverage.
• Ensure compliance (e.g., NCA ECC) and audit readiness.
• Primary escalation point for SOC Development issues.
• Align SOC Development outputs with SOC Monitoring needs.

Skills

Stakeholder engagement

Incident handling & response

Security content development

Dashboard development & visualization

Use case development & tuning

MITRE ATT&CK knowledge

Log source onboarding

Security operations center

Education

Bachelor's degree in Cybersecurity/CS/IT

Master's degree preferred

Tools

Splunk

Anomali

Job description

sirar by stc is seeking an experienced SOC Development professional to lead end-to-end delivery for MSSP services in the Saudi market. You will own the SIEM lifecycle, including onboarding, parsing, normalization, and use case development, while ensuring performance and compliance across multiple customer environments.

The role requires strong incident handling skills, advanced Splunk/Anomali experience, and a fit for a dynamic MSSP environment focused on continuous detection improvement.