Hamza Afzal
Soc Analyst @Capital One
Signup · Get unlimited contacts
WORK HISTORY
Soc Analyst @Capital One
Triaged and correlated high-volume security alerts using QRadar and Splunk, accelerating escalation of high-priority threats across enterprise financial infrastructure. Investigated malicious traffic patterns using Wireshark and Suricata, uncovering DNS tunneling, protocol misuse, and early-stage C2 activity across TCP/IP, DNS, and HTTP/HTTPS. Isolated and remediated endpoint infections using CrowdStrike and SentinelOne, identifying covert malware implants and terminating active command-and-control channels. Applied MITRE ATT & CK framework to classify adversary behaviors, optimizing detection signatures and improving alert fidelity for persistent threat tactics. Conducted deep system log reviews via Sysmon to trace unauthorized executions, registry tampering, and lateral movement across Windows and Linux assets. Developed automation scripts in Python, PowerShell, and Bash for IOC parsing, log enrichment, and data correlation, drastically reducing incident triage time. Executed recurring vulnerability assessments with Nessus and Qualys, uncovering unpatched systems and high-risk misconfigurations within production environments. Followed NIST Incident Response Framework throughout detection, containment, and recovery phases, ensuring protocol adherence during high-impact security events. Led forensic analysis across diverse systems, reconstructing attacker timelines, privilege escalation paths, and breach footprints within segmented network environments. Deployed deep packet inspection across encrypted and plaintext layers (TCP, IP, HTTPS) to detect covert data exfiltration and unauthorized tunneling activities. Simulated attacker tactics in isolated lab environments using Suricata, Wireshark, and MITRE ATT & CK, validating detection logic and expanding SOC detection coverage.
EDUCATION
Virginia Tech
Cybersecurity Management and Analytics , Business
ABOUT HAMZA AFZAL
Cybersecurity SOC Analyst with experience supporting enterprise and multi-environment…
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.