Performing real-time network and security incident monitoringanalysis and investigations on different devices such as firewalls, operating systems proxy, servers, and applicationshandling critical offenses related to entry points using advanced searching to hunt illegitimate traffic based on Mitre and suspicious behavior indicated to attack.providing inputs to fine-tune existing use cases to reduce false positives and build rules more efficientlyDealing with multiple Vendors EDR & XDR to Validating alerts and deep investigation Practical usage of Threat Intels such as GroupIB, SeclyticsDaily use of sandboxes and threat Intel tools and websites such as Any-run, Cuckoo, AlienVault, Hybrid Analysis, Virus Total, Url Scan…, etc.

Security Principles: Mastered foundational security concepts, crafting robust security policies.SOC Involvement: Actively monitored threats and contributed to incident response in the Security Operations Center (SOC).Incident Response: Played a pivotal role in analyzing and responding to security incidents swiftly.Malware Analysis: Conducted hands-on analysis to identify and mitigate malware threats effectively.Computer Forensics: Engaged in digital investigations, ensuring the integrity of digital evidence.OSINT Exploration: Leveraged open-source intelligence techniques to enhance threat intelligence.

Blue Team Scholarship - Soc Analyst - Threat Hunter

Studying Infosec solutions to implement them and provide our customers with troubleshooting, and filling security gaps F5PaloAltoFortiGate Gigamon Kaspersky Security Center Python Automation - Power AutomateMDM ScaleFusionTenable ( IO - VM - Was - Nessus )