Hamid Bouzid

Csoc Analyst L3 @AtkinsRéalis

Montreal, QC, CA

Analyze security events and incidents to identify potential security breaches and take appropriate action to contain and remediate incidents.• Identify, and respond to security alerts in Elastic SIEM, Azure, M365 Defender, Advanced Hunting, Purview, Trellix EDR and McAfee AV.• Create and maintain playbooks, use-cases, rules, dashboards, and queries into SIEM.• Use of digital forensic artifacts and tools such as Cyber Triage, Axiom, Encase, FTK, Volatility, Velociraptor & Open-Source tools• Lead the forensic investigations on small to medium investigations such as Business Email Compromises and Ransomware.• Perform forensic analysis, implementing incident response procedures, and analyzing malware, identifying attack vectors, threat tactics, and attacker techniques.• Write Yara rules for SIEM and NEDR to enhance threat detection.• Perform Incident Response using Velociraptor, Magnet Axiom, and log analysis tools.