Ibadullah Khan

Security Analyst @Positivity

Waterloo, ON, CA

Managed, monitored, optimized Azure Sentinel, MCAS, Defender Security Center, Intune, and otherMicrosoft security platforms.•Analyzed requirements for security tools and technology (SIEM, Endpoint Protection, VulnerabilityManagement, DLP, perimeter security, DDoS, other).•Correlated with threat intelligence sources to identify the threat actor and determine the origin of theincident.•Provided direction and guidance on customer security requirements and standards for monitoring,alerting and incident response.•Identified strategy for containment, remediation steps and recovery procedures.•Identified new security threats by conducting continual monitoring, security testing, vulnerabilityassessments and log analysis.•Conducted system containment, remediation steps and recovery procedures.•Used threat reporting and/or the hypothesis-driven method to create, scope and execute threat hunts.•Performed endpoint, network, azure log analysis, correlating events in both proactive hunt activities andreactive response.•Searched for, identified and documented cyberthreats and risks hidden from existing detection logic,analytics, and machine learning.•Assisted in organizing findings into reports with the goal of identifying and informing readers ofenvironmental and organizational threat trends.