Omar M.Private profile: Upwork shows its earnings only to signed-in members, so we check it every few weeks, not daily. MRR here is a rough estimate (Upwork's six-month earnings ÷ months active). Last read Nov 5, 2026.

I’m a Senior Cyber Defense Consultant with 9+ years of hands-on experience securing more than 70 government and semi-government organizations. My work focuses on SOC operations, threat detection, incident response, SIEM engineering, EDR tuning, and large-scale automation that improves security posture while reducing analyst workload. Where I Can Support Your Organization Immediately: • SIEM Engineering (Elastic, Splunk, Sentinel) I’ve written, deployed, and fine-tuned 60+ detection rules across SIEM, EDR, and NDR platforms. I can build correlation logic, optimize alert quality, create dashboards, integrate logs, and reduce false positives — ensuring your SOC gets meaningful, actionable alerts. • SOC Automation & Playbook Development (SOAR) I’ve designed 150+ SOAR playbooks and automated more than 140,000 incidents quarterly. I can build custom workflows, automate triage, enrichment, containment actions, and streamline end-to-end incident response so your SOC operates with speed and consistency. • Threat Detection & Incident Response Daily hands-on experience across the entire kill chain: alert triage, endpoint/network investigation, threat intelligence enrichment, containment, remediation, and executive reporting. I can manage IR cases or strengthen your existing processes. • EDR Deployment & Optimization (CrowdStrike / Defender) Extensive experience deploying, configuring, and tuning EDR sensors, response policies, host protection settings, and investigative workflows. I can improve detection accuracy and reduce response time through real-world, tested configurations. • Malware & Network Analysis Practical experience analyzing malicious files, behaviors, and command-and-control activity using both static and dynamic methods. Skilled in packet inspection, lateral movement detection, and forensic artifact review. Certifications (available on demand): • ECCouncil ECIHv2 - Certification • Incident Response Professional (eCIR) - Certification • ISC2 Cybersecurity - Certification • Demisto (XSOAR Cortex) SOAR Engineer - Certification • Demisto (XSOAR Cortex) SOAR Analyst - Certification • Recorded Future Analyst - Certification • Recorded Future User – Certification • Carbon Black Advanced Analyst - Certification • Carbon Black Administrator - Certification • Carbon Black Introductory Analyst - Certification • Carbon Black Defense – Certification • CrowdStrike FHT 100 – Certification • CrowdStrike FHT 101 – Certification • CrowdStrike FHT 120 – Certification • Splunk Fundamentals - Certification • Operationalizing MITRE ATT&CK - Certification • Lastline Partner – Certification • Trendmicro Blue Team CTF - Certification • Corelight Partner - Certification • CCNA - Certification • LetsDefend: Web Expert - Badge • LetsDefend: Detector - Badge • LetsDefend: Incident Handler2 - Badge • LetsDefend: First Blood - Badge • LetsDefend: Incident Handler - Badge