Soc Analyst Cyber Security

Alan Naqshbandi

(***) ***- **** ****.****@*****.***

Profile

An analytical, self-motivated, and collaborative individual with experience providing strategic support and guidance in Cyber Security environments.

Broad academic and practical experience, with a strong background in user support, network security, data protection, risk assessment, reporting, network infrastructure/ architecture, testing, and project management.

Core competencies in threat/ vulnerability management, digital forensics, security devices, penetration testing, applied cryptography, cyber incident response, business intelligence, disaster recovery, cyberattacks/defenses, access control, network administration, and network & web application security.

Proficient communication, liaising, and leadership abilities (both working independently and as part of teams). Proven ability to establish a positive rapport with clients, colleagues, superiors, and other professionals while working in fast-paced, zero-downtime environments.

Advanced technical competencies across a wide range of programs, platforms, applications, and frameworks, including Nmap/Zenmap GUI, NGFW (PaloAlto), Netskope CASB, STRIDE, WAF Checkpoint CloudGuard AppSec, dotDefender, Acunetix Web Vulnerability Scanner

(WVS), Azure AD, Wireshark, PRTG, Socat, powercat, reverse shell, Metasploit, Redline, FTK Imager, Kiwi Syslog Server, Atom, Netcraft, OSSIM SIEM, Snort IDS, Suricata IDS, ntopng, eMailTrackerPro and MxToolbox (among others).

Education

Algonquin College Ottawa, ON 2021- 2022

Diploma, Cyber Security Analysis

Kharkiv National University of Radio Electronics Ukraine 2012- 2013 Bachelor of Telecommunication Systems and Networks (ICAS Assessed as Equivalent to a Canadian degree) Experience

SOC Analyst (Monitoring & Detection team) Canada Revenue Agency (CRA HQ) (Ottawa, ON) 2022

Analyze email header and body with tools to identify spam that could be malicious to the system. categorize the emails if (advertisement, legitimate, malware, phishing, or suspicious). after analyzing the email based on categorization will set the domain as a whitelist or blacklist to Purge or block the email.

Triage verifying that all monitoring tools are operational and logging alerts, Also, preparing a report by gathering information from colleagues about the cases and posting them in daily huddle channels to discuss them with the team.

Tracking one of the tool’s dashboards and investigating the alerts in case of false positives is no need to open the case but in case unknown issue then opens a case and assign it to one of the analysts.

Collaborate with the teams to update playbooks on regular bases. Residential Technician Sc360 (Ottawa, ON) 2019

Provided troubleshooting for internet and home phone services directly to clients.

Conducted testing based on symptoms and took appropriate actions, including increasing/ decreasing frequencies and aligning dishes to work within corporate networks.

Installed devices and confirmed proper fitment, purpose, and function. IT/ Security Technician Korek Telecom (Iraq) 2013- 2016

Audited network systems to identify security vulnerabilities, and applied appropriate security countermeasures using MBSA.

Used diagnostic tools, including Wireshark, to analyze potential server complications and worked with internal teams to improve the network’s CIA.

Updated patches upon release to prevent malicious activity and reduce attack potential. Internet Technician Kurdistan-Net/ Newroz Telecom (Iraq) 2012- 2013

Identified network errors, opened tickets, conducted site surveys, and prepared Weekly performance reports.

Installed new connections, ran cabling through homes/ businesses, and educated clients on solutions. Certifications, Training, and Professional Development

Training Completion- Network Defense (Endpoint Security & Network Security) from INE. (2022)

Training Completion- Digital Forensics (Network Forensic & System Forensic) from INE. (2022)

Training Completion- Microsoft Certification Exam AZ-900 from INE. (2022)

Training Completion- Practical Web Defense from INE. (2022)

Training Completion- Incident Handler, EC-Council ECIH v2 (2022)

Training Completion- Certified SOC Analyst, EC-Council CSA (2022)

Training Completion- Excellence in Customer Service, Pinecrest-Queensway Employment Services (2018)

Training Completion- CompTIA N+ (2017)

Training Completion- Foundation of Management and Leadership, Venture International Business Consulting and Training

(2015)

Training Completion- CompTIA S+ (2013)

Training Completion- CCNA R&S (2008)

Cyber Security Projects:

Digital forensic (Suzan Sauce) (2022)

Applied Cryptography (Digital Certificate Client and Bank system) (2021)

Incident Response (Log analysis) (2022)

Contact this candidate