Hany S.

I help organizations improve security visibility by designing, implementing, and troubleshooting reliable log collection, SIEM integrations, and telemetry pipelines across Windows, Linux, macOS, cloud, and hybrid environments. I have 5+ years of cybersecurity and IT consulting experience, with hands-on work in SIEM/SOAR, log management, security analytics, automation, and enterprise security operations. My experience includes ArcSight ESM, SmartConnectors, FlexConnectors, Logger, ArcMC, Microsoft Sentinel, Splunk, Elastic Stack, Google SecOps/Chronicle, Graylog, FortiSOAR, and Linux/Windows environments. I can help with: SIEM onboarding, log source integration, parsing, normalization, and field mapping ArcSight ESM, SmartConnector, FlexConnector, Logger, ArcMC, and Transformation Hub support log collection pipeline design for Windows, Linux, macOS, Syslog, JSON, CSV, and cloud sources Microsoft Sentinel, Splunk, Elastic/ELK, Google Chronicle, Graylog, and security analytics workflows Detection use cases, dashboards, playbooks, and SOC automation using PowerShell, Bash, and Python Troubleshooting log ingestion issues, connector performance, missing events, parsing errors, and visibility gaps Nexthink DEX implementation, dashboards, campaigns, remote actions, and endpoint experience analytics My focus is simple: help teams collect the right security data, structure it correctly, and make it useful for detection, investigation, and response. Message me if you need help with SIEM integration, log collection, ArcSight support configuration, Sentinel/Splunk/Elastic onboarding, or security automation.