Mujtaba Khan Email & Phone Number

Riyadh, Saudi Arabia

Actively hunt for Indicators of Compromise (IOCs) and APT Tactics, Techniques, and Procedures (TTPs) in the infrastructure and organizing detections in the framework of MITRE ATT&CK.-Collaborate with the other fellow, SOC and Threat Analysts to create countermeasures to aid in future prevention and detection of cyber threat activity.-Leading and Investigating, potential security incidents response, possible vulnerabilities, and serve as a Lead Incident Handler to mitigate the incident.-Responsible for fine-tuning and to correlate various log sources via Splunk Enterprise Security by reviewing alerts generated by detection infrastructure for false positives and improve alerts as needed.-Contribute in writing, developing and optimizing use-cases, run books, and playbooks to manage various daily based security alerts.-Investigating and validating actionable security alerts/events and escalate or take action as indicated in the security model to mitigate threats.-Logs Analysis for Firewalls, Intrusion Detection and Prevention Systems, Email Security, DDoS Protection, Endpoint Detection Systems, Proxy Servers, Databases, and other Security Controls.-Working collaboratively with other technology teams in ensuring security programs are integrated into the overall development life-cycle and security findings are remediated within required remediation time-frames based on their severity.-Continuous capacity building of current and emerging cyber threats.

Lahore, Pakistan

Key Responsibilities:-Delivering and maintaining the SIEM - Security Information and Event Management-Managing, Leading and Directing team against potential security incidents, possible vulnerabilities and serve as an Incident Response Lead to handle and mitigate the security incident.-Custom Data Source Integrations and parsing, SIEM troubleshooting its effectiveness review, health assessment, optimization and custom correlation rule writing.-Responsible for offence fine-tuning, writing custom email templates and to correlate various log sources via SIEM queries.-Writing and maintaining SIEM Use-cases for different Log Sources.-Continuously Monitor Network, Critical Servers and PCI-DSS Assets to check for events of attack vectors, threats and attacker techniques.

Pakistan

Key Responsibilities: - A Direct response to security incidents affecting clients.- Propose and coordinate incident response plans- Correlate incident data to identify specific vulnerabilities- Conduct log analysis in support of incident response investigations.- Recognize attacker tools, tactics, and procedures (TTPs) and indicators of compromise (IOCs) that can be applied to current and future investigations- Conduct if needed ad-hoc incident analysis- Provide timely detection, identification, and alerts of possible attacks/intrusions, anomalous activities, and misuse activities-Distinguish the incidents and events from benign activities

Lahore, Punjab, Pakistan

Analyze the security measures and determine how effective they are. Responsible for protecting sensitive information and ensuring all networks have adequate security to prevent unauthorized access. Perform analysis tasks, and communicate effectively with the constituency and other external contacts.I am an energetic, ambitious person who has developed a mature and responsible approach to any task that I undertake, or situation that I am presented with.Having good leadership and teamwork qualities.

Lahore, Pakistan

Subject includes:1) Operating Systems2) Database Management Systems3) Analysis of Algorithms4) Discrete Mathematics5) Computer Networks

Data Science Micromaster’S

Bscs