SOC Team Lead

About the role

The SOC Team Lead will head ITHR's Security Operations Centre, overseeing day‑to‑day security monitoring, detection and response for multiple customers across the UAE and Middle East. This senior, hands‑on position blends technical expertise with people leadership to ensure high‑quality, consistent security operations.

Key responsibilities

• Lead, mentor and develop L1, L2 and L3 SOC analysts, managing shift coverage and performance.
• Act as the primary escalation point for high‑severity and complex incidents.
• Conduct and supervise threat detection, alert triage, investigation and incident response activities.
• Drive threat‑hunting initiatives to uncover indicators of compromise, persistence mechanisms and lateral movement.
• Own and continuously improve SIEM correlation rules, detection logic and alert tuning.
• Develop, maintain and enforce incident‑response playbooks, runbooks and escalation procedures.
• Collaborate with DFIR specialists, delivery teams, account managers and customer stakeholders.

Required profile

• 5‑8 years of experience in SOC operations or incident response.
• Proven ability to lead and develop security analyst teams.
• Hands‑on technical expertise with a strong focus on operational excellence.
• Experience working in a managed security services environment.

Required skills

• SIEM platforms and correlation rule development.
• Threat hunting and detection engineering.
• Incident response and playbook creation.
• Alert triage and investigation.