Senior Cybersecurity Lead

About the role

We are looking for a Senior Cybersecurity Lead to own detection, response and threat hunting for a national, sovereign platform trusted by millions. Based on‑site in Muscat, you will protect a multitenant environment that handles the most sensitive citizen data.

Key responsibilities

• Lead security operations including monitoring, detection and incident response across the platform.
• Design, build and tune detection engineering – rules, analytics and use cases in SIEM and SOAR.
• Run end‑to‑end incident response from triage through containment, eradication and post‑mortem.
• Drive proactive threat hunting and integrate threat intelligence into defenses.
• Automate response with SOAR playbooks to reduce mean time to detect and respond.
• Conduct red‑team and purple‑team exercises and translate findings into hardening actions.
• Ensure alignment with data protection law, ISO 27001 and NIST, maintaining audit‑ready evidence.
• Mentor and grow the security operations team, managing escalation and on‑call duties.

Required profile

• Proven experience leading security operations or incident response in high‑risk environments.
• Ability to think like an attacker and develop effective detection controls.
• Hands‑on experience with SIEM, SOAR, EDR and detection engineering.
• Track record of handling real incidents under pressure and improving programs.
• Experience translating ISO 27001/NIST frameworks into operational controls.
• Bachelor’s degree in Computer Science, Cybersecurity or related field; certifications a plus.
• Fluent English; Arabic is an advantage.

Required skills

• SIEM
• SOAR
• EDR
• Detection engineering
• Incident response
• Threat hunting
• Threat intelligence
• Red team exercises
• Purple team exercises