Mohammad Mehrad Rasoli

About Mohammad Mehrad Rasoli

SOC Analyst and Cybersecurity professional with a solid foundation in incident response, threat detection, and endpoint security. Skilled in monitoring and analyzing security events using SIEM tools, responding to phishing and email threats, and supporting organizational security posture.Hands-on experience with endpoint detection & response, log analysis, Python scripting for automation, and managing security workflows via Jira. Security+ certified, with a strong commitment to continuous learning and staying ahead of emerging threats.Core Competencies:• Security Operations & SOC Monitoring• Incident Response & Threat Analysis• SIEM (Splunk, QRadar, Sentinel)• Endpoint Detection & Response (EDR)• Phishing & Email Security Analysis• Python Scripting for Security Automation• Jira Workflow & Ticket Management• Security Awareness & DocumentationDriven to contribute to security-focused teams, enhance defenses, and support resilient digital environments. Open to connecting with cybersecurity professionals and organizations focused on protecting critical assets.

Experience

1. Cybersecurity Analyst

   Cydeo

   Nov 2024 — Present · US

   Conducted round-the-clock monitoring using Splunk and QRadar to detect anomalies and security events across client environments.Leveraged Falcon’s Crowdstrike and Sysmon logs to investigate suspicious endpoint behavior and isolate infected systems.Led email investigations utilizing VirusTotal and header inspection to flag malicious payloads and phishing attempts.Maintained Jira-based incident tracking with detailed timelines, root cause summaries, and mitigation steps.Collaborated with vulnerability management teams using Greenbone to assess and address risks tied to outdated systems.Enhanced Microsoft Sentinel integration by optimizing data connectors for better visibility of M365 log activity.Monitored network activity through Wireshark, identifying unauthorized outbound connections tied to potential data exfiltration.Authored basic PowerShell scripts for parsing logs and correlating time-based events across systems.Engaged in post-incident reviews and contributed to improvements in detection rules and response checklists.Performed initial threat classification based on MITRE ATT & CK tactics during triage.

Education

• Rana University

  Certificate , Web designing and Development Specialist.

  2014 — 2014

• Shahid Mohammad Hassan

  High school diploma

  2009 — 2011

• Kabul Polytechnic University

  Bachelor of computer engineering & informatics, Computer/Information Technology Administration and Management

  2012 — 2015