Sami R.

Stay Prepared To Avoid Regret I help businesses and organizations strengthen their cybersecurity by finding real security gaps, detecting threats early, and building practical security solutions that fit their environment, risks, and budget. I have 5+ years of hands-on experience in SOC and cybersecurity, covering SIEM, threat detection, incident response, endpoint security, vulnerability assessment, cloud and identity security, threat intelligence, DLP, and security automation. I don't believe every business needs an expensive or complicated security setup. My approach is simple: understand your environment, identify the actual risks, and implement security controls that provide real security value. What I Can Help You With SIEM & SOC ✔️ LogRhythm — LRPA & LRSA Certified ✔️ Splunk — SPL, dashboards, administration, detection rules & reports ✔️ Wazuh — Deployment, monitoring & multi-node environments ✔️ SIEM deployment — Log onboarding, parsing, correlation rules & alert tuning ✔️ SOC Monitoring & Detection Optimization — Use-case development, alert investigation, and false-positive reduction. Cloud & Identity Security ✔️ Microsoft 365 & Entra ID Security — SIEM log integration, MFA, Conditional Access, access policies, and security control implementation. ✔️ AWS Security — CloudTrail, VPC Flow Logs, GuardDuty & WAF log integration ✔️ Google Workspace — Security reviews, MFA policies, password management & admin permission reviews ✔️ Active Directory — Security hardening, access management & audit monitoring ✔️ IAM — MFA, access-control policies & account security Endpoint & EDR Security ✔️ Microsoft Defender for Endpoint, CrowdStrike Falcon, Kaspersky & Trend Micro ✔️ Endpoint telemetry, behavioral analysis & threat detection ✔️ Endpoint log collection and SIEM integration ✔️ EDR/API integrations ✔️ Endpoint threat investigation & IOC analysis Web Application Security ✔️ Web application vulnerability assessments, Nessus scanning, security testing, risk analysis & hardening recommendations. ✔️ Website malware investigation, cleanup & remediation. ✔️ WAF configuration, monitoring & security recommendations. Threat Hunting & Incident Response ✔️ MITRE ATT&CK-based threat hunting and proactive detection ✔️ Incident investigation, containment, eradication & recovery ✔️ RCA & attack-path investigation ✔️ IOC investigation and enrichment — IPs, domains, URLs & hashes ✔️ Incident response playbooks and detection/response automation Threat Intelligence ✔️ MISP & OpenCTI deployment, configuration & intelligence management ✔️ IOC enrichment and threat intelligence analysis ✔️ SIEM/EDR integration for correlation and detection ⚙️ SOAR & Security Automation ✔️ SOAR implementation and incident response workflows ✔️ Alert enrichment & automated investigation ✔️ Host isolation, Geo-IP blocking and IOC-based response ✔️ Automated remediation and security-tool integrations Risk, Compliance & Security Assessment ✔️ ISO 27001 & HIPAA — Security controls, gap assessments, risk management & compliance alignment for regulated environments. ✔️ Security Risk & Vulnerability Assessments — Identification, analysis and prioritization of security risks. ✔️ Risk-Based Remediation — Practical remediation plans prioritized based on business impact and risk. ✔️ Security Documentation — Security policies, procedures, assessment reports & compliance documentation. SOC Labs, POC & Training ✔️ SOC Lab Deployment — Practical SOC environments for testing, training & demonstrations ✔️ AWS Security Labs — Splunk, Windows Server, Linux & pfSense-based environments ✔️ SOC Training & Attack Simulations — Hands-on L1 training with practical attack scenarios ✔️ Security PoCs — Testing security technologies and workflows before production deployment ⭐ What You Can Expect From Me Whether you are a startup, SMB, enterprise, or MSSP, I can help you: ✔️ Identify and prioritize security risks ✔️ Deploy, manage or improve your SIEM/SOC ✔️ Build meaningful detection use cases ✔️ Reduce false positives and unnecessary alerts ✔️ Investigate and respond to security incidents ✔️ Improve endpoint, identity and cloud security ✔️ Integrate threat intelligence & automate security operations ✔️ Prepare clear security, risk and compliance reports ✔️ Build solutions around your actual infrastructure and budget ⭐ Why Work With Me? ✔️ 5+ years of hands-on cybersecurity & SOC experience ✔️ LogRhythm LRPA & LRSA Certified ✔️ 130+ production detection rules developed and tuned ✔️ Strong experience across SIEM, SOC, EDR, threat hunting & incident response ✔️ Practical, business-focused security approach ✔️ Comfortable working with both technical and non-technical teams ✔️ Available for long-term projects, retainers and ongoing security support If you are looking for someone who can not only identify security problems but also help you fix them, let's talk.