SOC Development Lead

Advanced technology and cybersecurity company (sirar) established by stc, the region’s ICT and digital services provider, sirar by stc is a cutting-edge cybersecurity provider that empowers organization to take control of their cyber capabilities and digital environments. As experts in business security and privacy. We offer a comprehensive range of solutions that help you to operate online safely, securely, and efficiently.

• Accountable for end-to-end delivery of SOC Development services across all customers, ensuring alignment with MSSP service scope and SLAs.
• Own the lifecycle of SIEM platforms, including onboarding, parsing, normalization, use case development, and reporting.
• Ensure the availability, performance, and integrity of SIEM infrastructure and associated integrations.
• Drive detection engineering maturity, ensuring continuous improvement in use case effectiveness and MITRE ATT&CK coverage.
• Ensure all deliverables meet compliance requirements (e.g., NCA ECC) and audit readiness standards.
• Act as the primary escalation point for all SOC Development-related issues impacting service delivery.
• Ensure alignment between SOC Development outputs and SOC Monitoring needs to enhance detection and response quality.

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related discipline.
• Master’s degree in Cybersecurity, Computer Science, Information Technology, or a related discipline is preferred.

• Certified Information Systems Security Professional (CISSP)
• SEC
  699:
  Purple Team Tactics – Adversary Emulation for Breach Prevention & Detection
• Certified Information Systems Auditor (CISA)
• Splunk Enterprise Security (ES) Certified Admin
• Splunk Certified Developer
• Match for Administrators 102
• Threat Stream for Administrators 102

• Minimum of 5 years of relevant experience.

• Advanced proficiency in stakeholder engagement and consultation with management on cybersecurity challenges and strategic requirements.
• Advanced proficiency in end-to-end implementation and configuration of SIEM and TIP solutions, specifically Splunk and Anomali.
• Advanced proficiency in SIEM and TIP architecture design.
• Advanced knowledge of Splunk and Anomali platforms.
• Advanced proficiency in cybersecurity incident handling and response.
• Advanced proficiency in MSSP content development.
• Advanced knowledge of the latest cybersecurity threat campaigns and attack trends.
• Advanced knowledge of log source integration and onboarding.
• Advanced knowledge of Events of Interest (EoI).
• Advanced proficiency in security content development.
• Advanced proficiency in dashboard development and visualization.
• Advanced proficiency in use case development and tuning.
• Advanced knowledge of the MITRE ATT&CK Framework.

By submitting your application, you confirm that you have read and understood sirar's Candidate Privacy Notice and agree to the processing of your personal data in accordance with it.