Mohammad Rasim Mattoo Email & Phone Number

Dubai, Ae

Dubai, Ae

United Arab Emirates

Evaluated client infrastructure, created a security plan, and provided a detailed report with findings and recommendations.Developed and implemented a comprehensive network system for the organization.Transitioned from traditional firewalls to next-gen firewalls, boosting network traffic monitoring by 50%.Enhanced incident response time by 30% through a tailored SIEM solution.

United Arab Emirates

1.SIEM Management: Oversee multiple MEA clients by utilizing SIEM tools like Exabeam, QRadar, Arcsight, and Sentinel to enhance security measures.2.Alert Analysis: Conduct thorough evaluations of triggered alerts and generate detailed reports, including pertinent artifacts and actionable recommendations based on the established escalation protocols.3.Incident Investigation: Execute in-depth investigations involving log analysis, phishing email assessments, malware analysis, and threat hunting. Leverage KQL queries to produce comprehensive Threat Advisory Reports.4.Reporting: Create and deliver Daily, Weekly, and Monthly reports while managing ad hoc requests tailored to client specifications.5.Use Case Development: Identify and formulate new use cases in response to emerging threats and newly integrated log sources to strengthen security protocols.6.Downtime Reporting: Promptly report any device or interface downtimes to maintain optimal system uptime, thereby minimizing log loss and delays.7.Incident Management: Participating in bridge calls for Priority 1 (P1) and Priority 2 (P2) incidents, collaborating with stakeholders to perform effective root cause analysis.

Jammu & Kashmir, India

Security Analyst with experience in proactive monitoring and response to security incidentsacross organization, infrastructure and applications.Responsible for threat actor-based investigations, recognizing attacks based on their signatures, and providing support to incident response.Employs excellent analytical, and interpersonal skills and experience working in a multi-vendor environment.Responsible for event analysis, attack identification, investigation of potential attacks.Operated security monitoring and incident response tools like Arcsight, EDR, Trend Micro, Azure etc. with a focus on proper investigation and continuous improvement.Utilizing threat intelligence tools like Virus Total, UrlVoid, Hybrid Analysis, URL2PNG and applying them to the environment to understand risk and the evolving threat landscape techniques.Having good knowledge and hands-on experience on iZoologic, It provides proprietary systems to monitor client brands and domains deep into the Internet and public facing web.