Mohamed Boukdir, Gnfa, Gcia, Cnda'Ceh, Ccna Sec Email & Phone Number

Develop content for a complex and growing Splunk infrastructure by combining the collection, management, and analytics capabilities/ correlation of the different data-sources: IDS, Proxy, DNS, FireEye and email logs.Create, enhance, and continuously improve an integrated set correlation searches, reports, dashboards, in response to new threats.Develop.

Researched new cyber threats, actors, and technologies that impact Raytheon Customers and proactively hunt for malware in different customers’ environments.Correlated threat data from various sources. Conduct research and evaluate threat intelligence to develop in-depth analysis and assessment on threats to critical networks and infrastructure.

Houston, Texas, US

Reviewed and analyzed escalated security events, logs, network traffic to identify security incidents. Products include ArcSight SEIM, McAfee NSM, TippingPoint, McAfee ePo.Performed triage to validate and prioritize potential security incidents and false alarms.Followed up and provided recommendation on the remediation steps needed for incident.

Provide expert information and network security services supporting the U.S. Department of Homeland Security (DHS Onenet) SOC. Create, deploy and monitor IDS/IPS/SIEM rules for emerging threats.Monitor and analyze security events, logs, network traffic, registry values, processes, and file names to identify security incidents. Products include ArcSight.

Monitor network traffic via Intrusion Detection Systems (IDS), Security Information Event Management (SIEM) to identify security related events.Perform triage to validate and prioritize potential security incidents and false alarms.Created shell scripts and ArcSight rules to automate the detection of malicious logic and intrusions in Juniper and PIX.

Miami, FL, US

Information Security

Associate Of Science (A.S.), Information Technology

Education record