Syed Maisam Abbas Z.

I help organizations detect, respond to, and contain cyber threats before they become breaches. With over 4 years of hands-on experience across both Red and Blue Team operations, I specialize in strengthening SOC environments through incident response, threat hunting, and detection engineering. What I Deliver: • Rapid incident triage and investigation across EDR, SIEM, and network telemetry • Threat hunting across endpoints, network traffic, and cloud workloads • Forensic analysis of compromised hosts and suspicious artifacts • SOC process maturity assessments (SOC-CMM, MAGMA-UCF, and control-effectiveness based assessments) • Development of CKC & MITRE ATT&CK–aligned use cases and alert automation via SOAR platforms (IBM Resilient, SIRP, etc.) • WAF hardening and tuning to improve detection and reduce false positives Tools & Platforms I Worked With in the past: SIEM: IBM QRadar, Trellix ESM, Microsoft Sentinel, Splunk EDR / XDR: Carbon Black, Trellix/FireEye HX, CrowdStrike, Defender for Endpoint, Trellix EDR, Trend Micro Network & Email Security: Trellix FireEye NX, Trellix ETP, Fortinet / Imperva / Cloudflare WAFs Threat Intel & DNS: Recorded Future, Infoblox DNS Security, CTM360, SpyCloud SOAR & Automation: IBM Resilient, SIRP, Helix XDR How I Can Help You • Strengthen your SOC detections and alert triage workflow • Investigate and respond to ongoing security incidents • Hunt advanced persistent threats (APTs) or targeted attacks • Perform digital forensic reviews to support post-incident analysis • Build or mature SOC documentation, playbooks, and shift processes