SOC Lead

Responsibilities

• Analyze SOC service performance, industry threats, advisories, and general industry developments.
• Provide advice for automating and enhancing ongoing SOC operations and general cybersecurity improvements.
• Support the offsite SOC in contextualizing alerts.
• Provide technical support to L2 SOC Analysts and Cyber Threat Intelligence Analysts.
• Develop playbooks and use cases for security operations.

Requirements

• Minimum 8 years of work experience in a cybersecurity discipline.
• Native Arabic speaker with strong verbal and written communication skills in both Arabic and English.
• Degree in Computer Science, Information Systems, or a closely related discipline.
• Hands-on experience with SIEM (Splunk) and EDR (McAfee, MS Defender, PA XDR).
• Experience with Cloud security (Azure, Sentinel, AIP).
• Strong knowledge of TCP/IP, networking, and common attack types (DoS, DDoS, MitM, etc.).
• Deep understanding of the Cyber Kill Chain and MITRE ATT&CK frameworks.
• Experience with Firewalls (Palo Alto, Fortigate), Endpoint security, and PAM (CyberArk).

Preferred Qualifications

• Relevant industry certifications such as CISSP, CISM, CISA, CCSP, GCIH, or OSCP.
• Demonstrable experience in analyzing threat intelligence indicators, TTPs, and threat actors.

Benefits

• Health insurance with a leading global provider.
• Career progression and growth through challenging projects.
• Excellent learning and development opportunities.
• Annual flight tickets.
• Inclusive and diverse working environment with flexible/hybrid options.

About the Company

Help AG is the cybersecurity arm of e& enterprise. Since 2004, Help AG has established itself as the Middle East's trusted IT security advisor, providing strategic consultancy and tailored information security services to enterprises and governments.