Abdullah Irshad Email & Phone Number

Saudi Arabia

Rawalpindi, Punjab, Pakistan

• Monitored the SOC for financial, telecoms, hospitals, and insurance industry customers. • Monitor and analyze log data from multiple log sources (Database, Firewall, Windows/Linux Servers) that come into the SIEM environment. Identifying external and internal threats, including investigating and documenting security incidents. Making recommendations for fixes and implementing those fixes where applicable. • Investigating the incidents using EDR/XDR for deep-level investigation, generating a ticket for a particular Incident, and escalating the incident to the client. • Maintain the ticket tracking sheet for Offenses, asset inventory, and baseline documents. • Performing Threat Hunting activity to identify the threats and vulnerabilities in the client environment. • Investigation and response to SIRT emails, including spam, phishing, and marketing emails etc. • Perform Health Checks activity using health check checklists. • Prepare daily, weekly, and monthly threat reports for executives. • Use cases fine-tuning and creation in SIEM solution by following MITRE ATT&CK® framework. • Analysis of Network & Infrastructure through Suricata, Crowd Strike, & Kaspersky Anti-Targeted Attacks. • Recommended appropriate guidelines to counter measures and tools to prevent security breaches. • Performing gap assessment activity on log sources. • Manage day-to-day operational cyber security tasks to maintain optimum business security.

Certified Information System Security Professional, Cissp

Shahadat Ul_ Alamiyah Fil_ Ulum Ul_Islamiyah Wal_ Arabiah, Master'S Degrees In Arabic Studies