Ghassan Alsaffar

About Ghassan Alsaffar

As a Senior Cybersecurity Analyst, I bring extensive experience in SOC operations…

Experience

1. Cyber Security Analyst

   Cybernow Labs

   Oct 2022 — Present

   Conducted log analysis on Splunk Enterprise Security and IBM QRadar SIEM solutions and provided recommendations to the technical teams via the IBM SOAR (Resilient), and Jira ticketing system. Monitored and analyzed SIEM alerts through Splunk Enterprise Security and IBM QRadar and identified security anomalies for investigation and remediation. Analyzed malicious incidents using SentinelOne and CrowdStrike Falcon EDR solutions, identified indicators of compromise, and prepared incident reports on the impact and scope of these activities using IBM QRadar SOAR(Resilient). Conducted analysis activities to determine the legitimacy of files, domains, and emails using OSINT resources such as VirusTotal, AnyRun, CyberChef, HybridAnalysis, urlscan, and MX Toolbox. Analyzed phishing incidents using Proofpoint Email Security and Protection and documented incidents using IBM QRadar SOAR. Familiarity with various tools such as Tenable Nessus, Revelstoke SOAR, and analyzed PCAP files using Wireshark. Familiarity with the fundamentals of network and information security, network technology and tools, identity and access management, and risk management. Provided other analysts with training, motivation, and guidance as a SOC Shift team member.

Skills

• Router Configuration
• Networking
• Telecommunications
• Wireless Networking
• Umts
• Ospf
• Mapinfo
• 4g
• Hardware
• Project Management
• Eigrp
• Ip
• 2g
• Troubleshooting
• Microsoft Excel
• Agilent
• Gsm
• Switches
• Drive Test
• Qxdm
• Testing
• Mobile Devices
• Voip
• Stp
• Analysis
• Tems
• 3g
• Wireless
• Ppp
• Ccna
• Tems Investigation
• Wcdma
• Cisco Routers
• Lte
• Gprs
• Team Leadership