HR Bamboos connects exceptional professionals with reputable organizations across Iran and international markets.

We are seeking an experienced Senior SOC Analyst to join our client, a growing e-commerce company, and play a key role in monitoring, investigating, and responding to security threats across the organization’s environment.
This role is ideal for a senior cybersecurity professional with strong expertise in security monitoring, incident response, threat hunting, digital forensics, and detection engineering, who is passionate about identifying sophisticated threats and strengthening security detection and response capabilities.

Key Responsibilities
Security Monitoring & Incident Response
• Monitor and investigate security events and alerts across SIEM, EDR, IDS/IPS, firewalls, and other security platforms.
• Investigate security incidents, assess their scope and impact, and coordinate containment and remediation activities.
• Document incidents, investigations, and remediation activities and prepare technical and management reports.
• Work closely with Security, Infrastructure, IT, and Engineering teams to address risks and strengthen security controls.

Threat Hunting & Detection Engineering
• Conduct proactive threat hunting to identify hidden threats and suspicious activity across the environment.
• Analyze threat intelligence and translate relevant findings into improved detection and response practices.
• Develop and refine detection rules, correlation logic, and security use cases within SIEM platforms.
• Contribute to the continuous improvement of SOC processes and align security operations with frameworks such as MITRE ATT&CK and NIST.

Forensics & Malware Analysis
• Perform memory, disk, and network forensics to investigate incidents and trace attack activity.
• Analyze malware behavior and support technical malware investigations when required.

Security Automation
• Develop and improve security playbooks, scripts, and automation to streamline SOC operations.
• Use SOAR capabilities to automate detection and response workflows and improve operational efficiency.

What You Bring
• 3+ years of professional experience in SOC, Cybersecurity, or Incident Response.
• Hands-on skills with SIEM platforms such as Splunk or ELK, along with EDR, IDS/IPS, and firewall technologies.
• Strong knowledge of network protocols, Windows, Linux, and security architecture.
• Strong log analysis skills across Windows, Sysmon, firewall, audit, and WAF logs.
• Strong knowledge of threat intelligence, attack techniques, and the MITRE ATT&CK framework.
• Strong scripting skills in Python, PowerShell, or Bash for security automation.
• Proven skills in security incident investigation and containment.
• Knowledge of cloud security and hands-on experience with Azure, Kubernetes, and container environments.
• Understanding of Application Security practices across software development and deployment.
• Familiarity with threat modeling and risk management frameworks.
• Strong analytical and problem-solving skills with a focus on security investigations and risk prioritization.
• Strong Technical Documentation and Communication Skills across Security and Engineering teams.

Nice To Have
• Experience with SOAR platforms and security automation.
• Hands-on experience in digital forensics and malware analysis.
• Familiarity with MITRE D3FEND.
• Experience securing large-scale cloud and container environments.
• Relevant cybersecurity or incident response certifications.

What We Offer
• Competitive compensation and benefits.
• Professional growth and development opportunities.
• Military Service Exemption Program (Amriyeh).
• Occasion & Holiday Gifts.
• Supplementary Health Insurance.

If you’re looking for a dynamic environment where your ideas, perspective, and contribution can make a meaningful impact on both your growth and the organization’s success, we’d love to hear from you.

Apply now

We maintain the highest level of confidentiality throughout the recruitment process.

Security Operations Center Jobs in tehran