Abul Asad Email & Phone Number

United States

• SOC Monitoring and Incident Reporting: Conducted real-time monitoring of security events and generated comprehensive incident reports to document security incidents and the actions taken.• Dashboarding: Configured and optimized dashboards within the SIEM platform to enhance daily security monitoring and facilitate quick analysis of security data.• Logging Levels Review: Regularly reviewed and adjusted logging levels across various integrated log sources to ensure comprehensive data collection and optimal performance.• Threat Advisory Management: Proactively addressed and escalated relevant threat advisories, tailoring responses to meet client-specific requirements and implementing measures to block active IOCs on relevant controls.• Phishing Incident Response: Managed phishing incidents by performing detailed analysis of email headers and other indicators to mitigate potential threats and reduce client exposure.• Use Case Definition and Tuning: Defined and refined use cases for alert generation, and conducted troubleshooting to ensure the accuracy and effectiveness of implemented use cases.• Runbook/Playbook Creation: Developed detailed runbooks and playbooks for responding to triggered alerts, enhancing the efficiency and consistency of incident response procedures.• Incident Metrics Reporting: Developed and maintained incident metrics reports, including Mean Time to Detect (MTTD), Mean Time to Respond (MTTR), and Mean Time to Mitigate (MTTM), to track and improve incident response performance.

Ontario, Canada

Wazuh SIEM Deployment: Led the deployment of Wazuh SIEM across the organization’s infrastructure, ensuring robust and scalable security monitoring.• Agent Installation: Managed the installation of Wazuh Agents on servers within the infrastructure, facilitating comprehensive data collection and analysis.• Asset Integration: Integrated newly discovered organizational assets with the SIEM system to enhance visibility and monitoring capabilities.• Security Reviews and Reporting: Conducted thorough security reviews and technical research, providing detailed reports to bolster the organization’s defense mechanisms.• Dashboarding: Designed and developed new dashboards within the SIEM platform to improve visibility and expedite analysis during security incidents.• Advanced Log Collection: Configured Sysmon (for Windows) and Audit Daemon (for Linux) to gather advanced logs, ensuring comprehensive data capture for security monitoring.• Firewall Log Parsing: Developed and implemented parsing techniques for firewall logs, integrating them with Wazuh SIEM. Utilized regular expressions (REGEX) to extract and structure relevant data for enhanced security monitoring and incident response.• Use Case Development: Designed and wrote use cases in XML format to define and address various security scenarios. This involved identifying potential threats and creating tailored rules to detect and respond to these threats effectively.• OS Hardening: Implemented operating system hardening measures based on CIS benchmarks to strengthen system security.• Security Measures Implementation: Developed and enforced security policies and measures to protect organizational assets and data.• Cross-Team Collaboration: Worked collaboratively with other teams to enhance the overall security infrastructure and address potential vulnerabilities.