Muhammad A.

A motivated cyber-security professional with diversified expertise and 5+ years of work experience in Information security, capable of quickly adapting of advance environments, a good team player, and an effective leader. Excellent working knowledge of Security Technologies and having a commitment to keep up to date with the latest developments. Being a Senior Security Analyst, I am skilled with the following: ✔SOC as a service ✔Threat Intelligence Service ✔VA/PT Service ✔SOC Gap Assessment Service ⚡⚡⚡⚡Technical Exposure⚡⚡⚡⚡ 🌟 Hands on Experience of managing on below SIEM technologies for monitoring, development of use-cases and parsing/mapping and integration of devices: ✔IBM QRadar, ✔Splunk, ✔LogSign, ✔LogPoint ✔Elastic Search. 🌟 Hands on Experience of managing, Deployment, triage analysis, investigation and manage incidents, create prevention policies on 3000+ Hosts including Windows, Linux, MacBook Platform through below EDR technologies. ✔CrowdStrike EDR ✔TrendMicro ✔Carbon Black ✔Fire Eye (HX/NX/EX) ✔Microsoft Defender for Endpoint 🌟 Hands on Experience of managing, Deployment, and monitoring Microsoft XDR technology and identify advance attacks. 🌟 Classification of malware after deep analysis, identification, validation and detection techniques and tactics. 🌟 Hands-on experience of preventing organization from brand impersonation through below mentioned tools which provides real-time visibility into potential underground cyber threats and analyzes domains to identify brand impersonation: ✔CrowdStrike falcon X Recon ✔CTM360 ✔Dark Owl 🌟 Hands-on experience of detecting policy violations (i.e., Block Mass Storage, Social Media Sites etc.), identifying known threats and IOC management in organizations through below Antivirus Solutions: ✔Symantec ✔Kaspersky ✔Trend Micro ✔CrowdStrike Prevent ✔McAfee 🌟 Hands-on experience of using and monitoring below listed network security controls for the detection of anomalies, suspicious Behavior, and policy violations. ✔Barracuda Email Security Appliance ✔Cisco Email Security Appliance ✔Microsoft Email Security Appliance ✔Palo Alto IDS/IPS Firewalls. ✔FortiGate IDS/IPS Firewalls. ✔Cisco IDS/IPS Firewalls. ✔Sophos Proxy ✔Cisco Proxy ✔Infoblox DNS Security ✔Trend Micro (DDI, DDEI, DDWI, DDAN) 🌟 Providing direction and guidance on customer security requirements and standards for monitoring, alerting and incident response. 🌟 Identifying strategy for containment, remediation steps and recovery procedures. 🌟 Identifying new security threats by conducting continual monitoring, security testing, vulnerability assessments and log analysis.