Headline

Cybersecurity Architect/Consultant | SOC | VAPT | OT Security

About

Experienced IT and OT Security Architect/Consultant with over 15 years of demonstrated history of working in IT and ICS Environments. Hands-on skilled in penetration testing and security assessment of IT/ICS products, security monitoring, threat detection and incident response, threat modelling and risk analysis, ICS/SCADA security assessment, security standards and frameworks: ISO 27001/2/5, NIST800-Series, CIS CSC, PCI DSS, HIPPA, ISO 15408, OWASP, PTES, ISSAF, MITRE ATT&CK, Cyber Kill Chain & Diamond model, IEC 62443, NERC CIP, API 1164.

Location

Tehran

Work experience

Cyber Security Architect(Consultant) at RighTel, Jul 2024 - Mar 2025 · 9 mos, Tehran, Tehran Province, Iran, Conducting penetration testing web and mobile apps Execute Red team activities and phishing assessment Network security solutions design including FW,SIEM,thread Detection and SOC process assessment contributing to security leadership in design and implementing governance, risks and compliance frameworks and info-sec standards.

Sr. Cyber Security Consultant at IRAN Telecommunication Research Center (ITRC), Aug 2022 - Oct 2023 · 1 yr 3 mos, Tehran, Iran, GRC,Information Security Controls, Security Risk Frameworks, Network Security Models Performing Thread modeling and Risk Assessments based on Security Frameworks including ISO27k, NIST-800-Series, CIS, etc. Creating Security Plans, Requirements, Controls and Roadmaps for Hardening Network and Communication Infrastructure.

Principal Security Engineer at Pavan Network and Security Solutions, Oct 2019 - Oct 2023 · 4 yrs 1 mo, Tehran, Tehran Province, Iran, Project Management in IT and OT security services Tech-Lead in IT/OT/ICS Security Department

Sr. Security Solutions Architect at Private Company, Aug 2018 - Aug 2023 · 5 yrs 1 mo, Tehran, Iran, Implementation and tuning of defensive controls based on CIS CSC ,CSF and ISO27001 standards. Build out security monitoring and SIEM infrastructure based on Splunk and ELK stack Attack Simulation and threat analysis based on MITRE ATT/CK and kill-chain model Conduct regular vulnerability assessment/penetration test on the organizations internal network and Web Applications and report on risk. Applying secure application design principles(Secure SDLC) to prevent security defects. Provide security requirements, technical guidelines, security tooling integrated into CI/CD.

Cyber Security Consultant at Ariya Samaneh Gostar, Oct 2020 - Dec 2021 · 1 yr 3 mos, Tehran, Iran

Education

Master’s Degree, Computer Engineering, Islamic Azad University

Bachelor’s Degree, Computer Hardware Engineering, Islamic Azad University