Cyber Security Defense Lead

Nawy

. Lead the organization's Security Operations and Cyber Defence functions.

Posted 11/9/2026full-timeCairo • EgyptSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Security Operations and Cyber Defence, with a strong focus on incident response, threat detection, and security monitoring across cloud environments. Proficient in managing security incidents and improving operational processes while ensuring compliance with relevant cybersecurity regulations.

Highest-signal resume keywords

Security Operations ManagementIncident Response CoordinationThreat Hunting ExpertiseSIEM and EDR ProficiencyCybersecurity Regulatory Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ResponseThreat DetectionSecurity MonitoringDigital ForensicsMalware AnalysisCloud Security MonitoringAttack Techniques UnderstandingThreat IntelligenceDetection EngineeringCyber Defence Metrics

Soft Skills

Excellent Communication Skills

Tools & Technologies

SIEMEDRSOARAWSGoogle Cloud PlatformMITRE ATT&CK FrameworkISO 27001NIST Cybersecurity Framework

Certifications & Qualifications

CISSPGCIAGCIHGCFAGMONSC-200

Industry Keywords

Cybersecurity RegulationsFRA RequirementsDIFC Regulatory Frameworks

Tech Stack

Tools & technologies

AWSCloudCyber SecurityGoogle Cloud Platform

About the role

Key responsibilities & impact

Lead the organization's Security Operations and Cyber Defence functions.
Develop and maintain security monitoring and incident response processes, procedures, and playbooks.
Manage and continuously improve SIEM, EDR, and security monitoring capabilities.
Lead investigation, containment, eradication, and recovery activities for security incidents.
Develop and maintain threat detection use cases and detection engineering practices.
Establish threat intelligence and threat hunting capabilities to proactively identify emerging threats.
Coordinate security incident communications and reporting to relevant stakeholders.
Ensure continuous monitoring of cloud, endpoint, network, and application security events.
Conduct post-incident reviews and drive improvements to security controls and operational processes.
Collaborate with Security Engineering to enhance security visibility and detection coverage.
Define and track cyber defence metrics, including MTTD, MTTR, detection coverage, and incident trends.
Manage relationships with external MSSPs, incident response partners, and threat intelligence providers when required.
Support regulatory reporting requirements related to cybersecurity incidents.

Requirements

What you’ll need

At least 6 years of experience in Security Operations, Incident Response, Threat Hunting, or Cyber Defence roles.
Strong experience working with SIEM, EDR, SOAR, threat intelligence, and security monitoring platforms.
Experience leading security incident investigations and coordinating response efforts.
Strong understanding of attack techniques, threat actor behaviors, and the MITRE ATT&CK framework.
Experience working with cloud security monitoring across AWS and Google Cloud Platform (GCP).
Familiarity with digital forensics, malware analysis concepts, and incident response methodologies.
Knowledge of security frameworks and standards including ISO 27001 and NIST Cybersecurity Framework.
Relevant certifications such as CISSP, GCIA, GCIH, GCFA, GMON, SC-200, or equivalent are preferred.
Familiarity with cybersecurity, risk, and data protection regulations in Egypt, including FRA requirements, and relevant DIFC regulatory frameworks.
University/college degree in a relevant professional field.
Excellent communication skills in English, both written and spoken.