SOC Team Lead

About the role

The SOC Team Lead will head ITHR's Security Operations Centre, ensuring continuous threat monitoring, detection, and response for our regional customers. This senior, hands‑on position combines technical expertise with people leadership to maintain high‑quality security operations.

Key responsibilities

• Lead, mentor and develop L1‑L3 SOC analysts, managing shift coverage and performance.
• Serve as the primary escalation point for high‑severity incidents across monitored environments.
• Oversee threat detection, alert triage, investigation and incident response while staying actively involved in analysis.
• Drive threat‑hunting initiatives to uncover indicators of compromise, persistence mechanisms and lateral movement.
• Own and continuously improve SIEM correlation rules, detection logic and alert tuning to reduce false positives.
• Develop, maintain and enforce incident‑response playbooks, runbooks and escalation procedures.

Required profile

• 5‑8 years of experience in SOC operations, incident response or related cybersecurity roles.
• Proven ability to lead and develop technical teams in a fast‑paced environment.
• Strong communication skills to interact with DFIR specialists, delivery teams, account managers and customers.

Required skills

• SIEM platforms and correlation rule development
• Threat hunting techniques
• Incident response processes and playbook creation
• Detection engineering and alert tuning

What we offer

• Opportunity to shape a growing Managed SOC practice in the Middle East.
• Collaborative environment with cross‑functional cybersecurity experts.
• Competitive compensation and professional development support.