Herani Gebreyohanes

Cyber Security Analyst @NatWest Group

Edinburgh, GB

Monitor internal and external cybersecurity events in a 24x7 Security Operations Centre (SOC), ensuring continuous protection of banking infrastructure and services.• Detect, raise, investigate, manage, and escalate security incidents, including DDoS attacks, malware infections, vulnerability exploits, unauthorised privilege escalations, and network intrusions, ensuring root cause analysis and full lifecycle incident management.• Conduct threat modelling and post-incident analysis, contributing to secure coding practices, identity and access management, and improved authentication controls.• Collaborate with cross-functional teams, including Incident Management, SysOps, NetOps, Application Owners, Mainframe, and end-users to respond to and resolve complex incidents.• Utilize Kusto Query Language (KQL) and SIEM tools (e.g, Splunk, Microsoft Sentinel) to analyse security logs and audit both malicious and benign behaviours, aiding in cyber defence optimisation.• Work in tandem with NetOps to detect and neutralise lateral movement, isolate compromised endpoints, and manage device/account remediation processes.• Contribute to continuous improvement initiatives across the SOC, enhancing operational efficiency, detection capabilities, and incident handling processes.