Muhammad Hassaan

Working on Qradar SIEM, monitoring alerts and driving investigations. • Recognizing and responding to alerts generated by security tools or reported by end-users. • Incident Triage and Analysis to conduct initial analysis of security incidents to determine their severity & impact. • Documenting all actions taken and findings during incident investigations for future reference and reporting. • Staying up-to-date with the latest cybersecurity threats, vulnerabilities, and attack techniques.

• Working on End point Detection & Response (EDR). • Working on new technologies related to Cyber Threat Intelligence (CTI). • Documentation, responding to alerts, collaboration with higher-level SOC analysts to perform deeper analysis. • Participating in cyber exercises as blue team on cyber range platform. Attending POCs of cyber security solutions.