Fahim M.

Information Security Consultant @CIBC

Toronto, ON, CA

Using SOAR and SIEM software for monitoring alerts, creating reports, and organizing essential data, enhancing team operational efficiency.+ Collaborating with various top vendors\' Proxy, Firewall, IDS/IPS, antivirus, and endpoint security tools (including EDR and XDR), enriching the team\'s capabilities in safeguarding operations.+ Preparing runbooks and playbook to aid the team in their investigative processes, streamlining operations effectively.+ Examining security alerts by analyzing proxy, firewall, and system event logs, contributing to precise threat investigations and improved operational response.+ Performing comprehensive analysis on data loss prevention (DLP) and Microsoft 365 security screening to identify threats, mitigating data exfiltration risks and reinforcing company data security.+ collaborating with adjacent security teams to refine threat intelligence and resolve rule logic issues, enhancing overall threat detection effectiveness.+ Developed detailed technical guidebooks and operational runbooks to standardize investigation procedures, enhance incident response consistency, and accelerate onboarding for new analysts.+ Organized and led knowledge-sharing and training sessions to strengthen team expertise in SIEM/SOAR tools, investigative workflows, and threat-hunting best practices.+ Researched, designed, and implemented enhanced investigation methodologies by exploring new tools and analytical techniques, improving efficiency and preparedness for emerging cyber threats.+ Designed and implemented SOC automation workflows to manage repetitive and known false-positive alerts, significantly reducing alert noise and improving analyst focus on high-priority incidents.

American International University-Bangladesh

Bachelor of Science (BSc), Computer Engineering

Ontario Tech University

Master of Science - MS, Information Technology Security