Liban Muse Email & Phone Number

United States

Hopkins, Minnesota, United States

• Thoroughly investigate escalated cases from SOC-L1 with detailed incident identification and scoping, taking appropriate containment actions, and recommending the best corrective remediation measures.• Develop advanced KQL queries to aid in incident investigations, such as high-risk sign-ins, BEC, delivered malicious threats via email, and comprehensive investigations in the M365 environment.• Maintain and enhance Standard Operating Procedures (SOP) and Knowledge Base (KB) for incident response, ensuring up-to-date practices.• Review end-of-day alarms to guarantee adherence to established standards, addressing any deviations promptly.• Facilitate training sessions for new hires, ensuring seamless integration into the SOC team and adherence to protocols.• Participate in interviewing prospective SOC-L1 hires, assessing their suitability and alignment with team requirements.• Collaborate with other teams, such as Threat Hunting, Cyber Intelligence, and Offensive Security, to ensure team readiness and conduct tabletop exercises for scenario preparedness.• Lead shift handover meetings to ensure seamless transitions between shifts, transferring critical notes and information to other teams for continuity and effective operations.

Hopkins, Minnesota, United States

• Monitored and analyzed security events and alerts from various sources, including but not limited to ELK SEIM, Azure Sentinel, and EDR tools• Performed triage and assessment of security incidents to determine their nature, severity, and potential impact• Collected and preserved digital evidence related to security incidents, such as log files, network traffic captures, and process memory dumps• Analyzed malware and threat indicators using tools such as dynamic analysis sandboxes and threat intelligence feeds• Conducted network and host-based investigations using techniques such as packet analysis, log correlation, and endpoint interrogation• Communicated with end-users and stakeholders to gather additional information, provide updates on incident resolution progress, and educate on security best practices• Documented security incidents and actions taken in accordance with established incident response procedures and provided regular reporting on incident trends and metrics• Continuously improved technical skills and knowledge of security threats, attack methods, and industry best practices through ongoing training and professional development.

St Paul, Minnesota, United States

Courses Studied:• Malware Analysis and Reverse Engineering • Digital Forensics • Vulnerability Discovery and Exploitation • Cyber threat Hunting and Intelligence

Hargeisa District, Woqooyi Galbeed, Somalia

Taught Computer System Security and Data Communication • Prepared course material such as syllabi, homework assignments, and handouts• Evaluated and graded student's classwork, assignments, and papers• Initiated, facilitated. and moderated classroom discussions• Maintained student’s attendance records, grades, and other required records

Hargeisa District, Woqooyi Galbeed, Somalia

Taught Cryptography and Network Security• Prepared course material such as syllabi, homework assignments, and handouts• Evaluated and graded student's classwork, assignments, and papers• Initiated, facilitated. and moderated classroom discussions• Maintained student attendance records, grades, and other required records.

Woqooyi Galbeed, Somalia

Taught Computer Network and Data Communication• Prepared course material such as syllabi, homework assignments, and handouts• Evaluated and graded student's classwork, assignments, and papers• Initiated, facilitated. and moderated classroom discussions• Maintained student attendance records, grades, and other required records.

Master'S Degree, Cyber Operations

Master'S Degree, Information Security

Bachelor'S Degree, Information Technology