Muhammad Moosa Aslam

Research emerging threats to engineer, test, and tune high-fidelity detection rules across endpoint, cloud, and network. Optimize ingestion, mapping, and parsing of security data into enterprise SIEM. Collaborate with Cyber IR, Threat Intelligence, and Threat Hunting teams to design advanced use-case models. Partner with Logging and Monitoring Compliance to remediate baseline monitoring gaps. Maintain coverage maps for business apps and cloud services using MITRE ATT&CK.

SME for escalated SOC incidents from managed clients and L2 analysts. Ensure managed/resident SOC teams meet 24/7/365 SOP and SLA requirements across detections and investigations, coordinating with vendor professional services. Improve monitoring and incident qualification processes. Support SOC engineering in tuning/creating detection rules. Assign and execute threat-hunting across environments, collaborating with IR and threat-hunting teams

Enhance incident context by correlating data across tools and sources. Act as escalation point for L1 analysts, owning escalated incidents end-to-end. Support crisis management alongside incident handlers and L3 analysts. Develop breach reports and visual representations; monitor metrics/trends for reporting. Reduce false positives and maintain the detection rules database. Perform SIEM/SOAR health checks and coordinate log collection compliance across teams.

Master's In Information System's Security