Security Operations Center (SOC) Lead

About the role

We are looking for a Security Operations Center (SOC) Lead to design, launch and govern a greenfield SOC for a telecommunications/critical‑infrastructure environment in Damascus. The role will define the operating model, monitoring framework and compliance processes before Day‑1, and later oversee the Managed Service Provider (MSP) SOC function.

Key responsibilities

• Define the SOC operating model, including structure, shift patterns and interfaces with NOC and IT operations.
• Design the cybersecurity monitoring framework covering OT/IT convergence, network and endpoint security, and threat intelligence.
• Create SIEM correlation rules, alert thresholds, SOAR playbooks and incident‑response procedures.
• Establish escalation paths, regulatory interfaces and staffing requirements.
• Validate SOC readiness through simulations, drills and acceptance sign‑off.
• Set compliance validation aligned with ISO 27001, IEC 62443 and NCA standards.
• Define SOC KPIs, SLAs and operating procedures for launch and ongoing service.
• Participate in Operational Acceptance Testing to ensure end‑to‑end readiness.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science or Information Technology.
• Minimum 10 years of experience in cybersecurity operations, with proven SOC design or management experience.
• Experience in telecommunications or critical‑infrastructure environments.
• Strong stakeholder management and cross‑functional coordination skills.
• Fluent written and spoken English; Arabic is a plus.

Required skills

• SIEM platforms
• SOAR platforms
• Endpoint Detection and Response (EDR)
• Threat intelligence platforms
• OT/IT security convergence
• Network and endpoint security
• ISO 27001, IEC 62443 and NCA security frameworks