Muhammad A.

Certified SOC Analyst | Certified Incident Handler | Certified Network Security Expert | CrowdStrike Certified Falcon Administrator (CCFA) Senior SOC Analyst and Cybersecurity Specialist with 5+ years of hands-on experience defending enterprise environments worldwide. I don't just respond to alerts - I hunt threats, engineer detections, and build the security infrastructure that stops breaches before they happen. **WHAT I DELIVER FOR YOU** SOC Operations & Management Build, optimize, or manage your Security Operations Center (SOC) from the ground up. I handle alert triage, incident investigation, escalation workflows, and daily/weekly security reporting. Threat Detection & Threat Hunting Using MITRE ATT&CK, LOLBAS, and hypothesis-based methodologies, I proactively hunt threats hiding in your environment before they trigger alarms. Detection Engineering & Use Case Development I've built 100+ custom detection rules across SIEM, EDR, XDR, and CASB platforms. I reduce alert fatigue by eliminating false positives and tuning detection logic for precision. Incident Response & Digital Forensics End-to-end incident response: containment, investigation, root cause analysis, and post-incident reporting. I handle credential theft, malware analysis, network forensics, and executive-ready reports. Cyber Threat Intelligence (CTI) Hands-on experience with OpenCTI, MISP, and Group-IB. I build threat intelligence pipelines, integrate STIX/TAXII feeds, and translate raw IOCs into actionable detections. SIEM & SOAR Deployment and Administration Expert-level experience with CrowdStrike Next-Gen SIEM, LogRhythm, Splunk, Microsoft Sentinel, and Trellix SIEM. I onboard log sources, build correlation rules, automate response playbooks via SOAR (including CrowdStrike Falcon Fusion), and tune your environment for maximum detection fidelity. Security Policy & Compliance Documentation ISO 27001-aligned policy writing, security procedure documentation, and security awareness program development for teams of any size. Vulnerability Assessment & Penetration Testing From Nessus-based vulnerability scanning and SecurityScorecard risk ratings to web application testing with Burp Suite and network assessments with Nmap — I find your exposures before attackers do. Cybersecurity Consulting & Mentoring Need guidance on OpenCTI deployment, SIEM architecture, or building a SOC from scratch? I offer consultations for teams, MSSPs, and security leaders. **TOOLS & PLATFORMS I WORK WITH DAILY** SIEM: CrowdStrike Next-Gen SIEM, LogRhythm, Splunk, Microsoft Sentinel, Trellix, Wazuh, QRadar EDR/XDR: CrowdStrike Falcon (Endpoint Security, Falcon EDR, Falcon Insight), Microsoft Defender (MDO/MDE), Trellix EDR, IVX Threat Intelligence: OpenCTI, MISP, Group-IB, STIX/TAXII, arcX Email Security: Abnormal Security, Microsoft Defender for Office 365 CASB: Skyhigh CASB VA/PT: Nessus, SecurityScorecard, Burp Suite, Nmap, Kali Linux, Metasploit Network Security: Wireshark, Fortinet, Palo Alto, Cisco ASA SOAR: CrowdStrike Falcon Fusion, XSIAM, XSOAR, Cortex, Custom PowerShell Playbooks Cloud Security: Microsoft Azure, Azure Sentinel, Microsoft 365 Security **CERTIFICATIONS** - Certified SOC Analyst (CSA) — EC-Council - Certified Ethical Hacker (CEH) — EC-Council - CrowdStrike Certified Falcon Administrator (CCFA) - Fortinet Certified Professional (FCP) NSE5 — Fortinet - Cyber Threat Intelligence 101 — arcX Ready to secure your environment? Send me a message and let's discuss your SOC, SIEM, or incident response needs.