Hanieh Forat

About Hanieh Forat

I am a confident, fast-learning, and attentive team player. I have developed necessary skills to not only keep the organization safe from cyber-attacks but also to put systems in a place that minimizes risk whilst protecting your assets. My set of knowledge makes me qualified to solve complex problems in results driven environments. My learning nature helps me to gain knowledge and skills required to keep up with the constantly evolving landscape in cybersecurity. I’m CompTIA Security+ and AWS Cloud Practitioner certified Security Operation Center Analyst.

Experience

1. Cyber Security Analyst

   Cydeo

   May 2022 — Present

   Monitor and track Splunk performance problems, administrations and open tickets with Jira• Review and interpret IPS/IDS and other security events using logs ingested to Splunk• Build security use cases to identify malicious activities in Splunk• Monitor Splunk internal logs to identify and resolve existing or potential issues• Conduct incident handling (Detection, Analysis, Triage)• Perform incident response analysis uncovering attack vectors involving a variety of malware, data exposure, and phishing and social engineering methods• Monitor security events received through alerts from SIEM or other security tools• Experience with the IBM Security QRadar SIEM product to debug reported problems• Conduct security investigation into incidents using Qradar security intelligence• Prior experience investigating security events; has the ability to distinguish incidents as opposed to false positive• Participate in the remediation of incidents and responses that are generated from live threats against the enterprise• Support and develop reports during and after incidents, which include all actions taken to properly mitigate, recover and return operations to normal operations• Understanding of enterprise networking (host-based firewalls, anti-malware, HIDS, IDS/IPS, proxy, WAF), Windows and Unix/Linux systems’ operations, TCP / IP protocols, experience providing analysis and trending of security log data• Analyze network traffic PCAP with Wireshark• Ability to work positively within a team environment as well as individually • Strong attention to detail• Open to new challenges and learning opportunities

Education

• Gazvin International University

  Bachelor of Engineering - BE, Architecture

  2009 — 2012