Ibrahim S

About Ibrahim S

A highly motivated CompTIA Security+ certified NATO veteran having hands-on experience in Cybersecurity Projects with prominent security tools, technology, processes, and policies. Specialized in investigation and incident response. Flexible and adaptive, quick learner able to analyze dynamic situations and work in a multicultural, diverse workforce in rapidly changing environments. Outstanding team leadership, program and project management, organizational, and communication skills.

Experience

1. Cyber Security Analyst

   Cybernow Labs

   Aug 2021 — Present · Sterling, VA, US

   Performed real-time monitoring with SIEM and EDR in a 24x7 Cyber Security Operation Center (SOC), including detection, response, and support roles and provided system rule and modification recommendations to the SIEM engineering team- Identified security anomalies for malware investigation and remediation- Analyzed, verified, and provided responses and reports of incidents that involve phishing, malware attacks- Successfully utilized Splunk and IBM QRadar SIEM solutions, Crowdstrike and SentinelOne EDR to monitor and analyze network traffic, investigated security alerts conducting log analysis and escalated them to the technical teams in a timely manner via IBM Resilient and JIRA ticketing system and identified security anomalies for investigation and remediation- Investigated compromised domains, rouge applications through log feeds- Conducted analysis to determine the legitimacy of files, domains and emails using online resources such as Virus Total, AnyRun, MX Toolbox, IPVoid, Urlscan.io, and Cuckoo SandBox- Analyzed PCAP files, narrowed down anomaly traffic with Wireshark, examined the details of the infected hosts and wrote IOC on executive summary reports- Reviewed existing policies and guidance to ensure compliance with (NIST) Risk Framework- Hands-on experience with firewalls, intrusion prevention/detection systems, vulnerability scanning, Data-Loss prevention, email gateways, proxies- Familiarity with fundamentals of information security including network technologies and tools, identity and access management, network security, implementing secure systems and risk management- Provided Firewall Administration with Fortinet next-generation firewall.

Education

• Turkish Naval War College

  Master of Science - MS, International Relations and Security Studies

• Milli Savunma Üniversitesi

  Bachelor of Science - BS, Industrial Engineering