Senior SOC Analyst

HR Bamboos is hiring on behalf of a company operating in the E-commerce sector. We’re looking for a Senior SOC Analyst to monitor and investigate security events, identify threats, and strengthen the organization’s detection and incident response capabilities.

• Monitor and investigate security events and alerts across SIEM, EDR, IDS/IPS, firewalls, and other security platforms
• Investigate security incidents, assess their scope and impact, and coordinate containment and remediation activities
• Conduct proactive threat hunting to identify hidden threats and suspicious activity across the environment
• Analyze threat intelligence and turn relevant findings into improved detection and response practices
• Develop and refine detection rules, correlation logic, and security use cases within SIEM platforms
• Perform memory, disk, and network forensics to investigate incidents and trace attack activity
• Analyze malware behavior and support technical malware investigations when required
• Develop and improve security playbooks, scripts, and automation to streamline SOC operations
• Use SOAR capabilities to automate detection and response workflows
• Document incidents, investigations, and remediation activities and prepare technical and management reports
• Work closely with Security, Infrastructure, IT, and Engineering teams to address risks and strengthen security controls
• Contribute to the continuous improvement of SOC processes and alignment with frameworks such as MITRE ATT&CK and NIST

• 3+ years of professional experience in SOC, Cybersecurity, or Incident Response
• Hands-on experience with SIEM platforms such as Splunk or ELK, along with EDR, IDS/IPS, and firewall technologies
• Strong knowledge of network protocols, Windows and Linux, and security architecture
• Strong log analysis skills across Windows, Sysmon, firewall, audit, and WAF logs
• Strong understanding of threat intelligence, attack techniques, and the MITRE ATT&CK framework
• Strong scripting skills in Python, PowerShell, or Bash for security automation
• Proven experience in security incident investigation and containment
• Knowledge of cloud security and hands-on experience with Azure, Kubernetes, and container environments
• Understanding of Application Security practices across software development and deployment
• Familiarity with threat modeling and risk management frameworks
• Strong analytical and problem-solving skills with a focus on security investigations and risk prioritization
• Strong technical documentation and communication skills across security and engineering teams

• Experience with SOAR platforms and security automation
• Hands-on experience in digital forensics and malware analysis
• Familiarity with MITRE D3FEND
• Experience securing large-scale cloud and container environments
• Relevant cybersecurity or incident response certifications

• Competitive benefits package
• Professional growth and development opportunities
• Military Service Exemption Program (Amriyeh)
• Occasion & Holiday Gifts
• Supplementary Health Insurance