Cyber Security Defence

1/2021 – 4/2024

Directed forensic and CIRT projects using Kape and EricZimmerman tools for Windows,Linux, Network, Memory forensics ,FTK; produced detailed analysis reports following NIST framework, resulting in a 90% success rate in delivering comprehensive final reports.
Trained Tier 1 personnel in Sysmon, log correlation, and Basic Windows internal analysis; boosted incident response effectiveness by 40% and slashed resolution time by 50% within 6 months.

Cyber Security

11/2020 – 1/2022

Led Security Operations Center (SOC) Tier 1 activities at 5 projects for 15 months, showcasing expertise in Splunk SIEM operations (SPL), ELK (KQL) and conducting analysis on Zeek, Sysmon, Linux Logs, security devices, Vulnerability, IDS/IPS, EDR, Cyber threat intelligence(CTI) tools.
Spearheaded the creation of 124 Detection Scenarios, leveraging cross-correlation and aligning with MITRE ATT&CK standards to increase threat detection efficacy by 30%.
Designed and deployed decoy objects (with PowerShell scripting) to detect attacks in lateral movement and initial access, while also deploying the solution to more than 10 companies and detecting 4 undetectable malware instances.
Led training sessions on Windows forensics and incident response for SOC Tier 2 personnel.
Enhanced security protocols by analyzing and optimizing use cases, leveraging cross-correlation and deep analysis techniques; decreased false positives by an impressive 70%, strengthening overall cybersecurity posture.
Implemented automated log analysis tools to uncover 20% more security bugs in the infrastructure, resulting in a proactive approach to security management and reducing potential security risks in the projects.
Trained Tier 1 personnel in Sysmon, log correlation, and Basic Windows internal analysis; boosted incident response effectiveness by 40% and slashed resolution time by 50% within 6 months.
Led cyber security analyst at Irancell Telecommunications Tier 1, enhancing detection procedures and security dashboards by 60%, resulting in streamlined detection and ticketing processes.

Cyber Security

2/2020 – 6/2020

Orchestrated and managed five critical projects in advanced malware analysis, implementing cutting-edge static and real-time analysis methodologies; increased threat detection accuracy by 40% and reduced response time by 25%.

Cyber Security