Ramil Ibrahimov

About Ramil Ibrahimov

I am a seasoned SOC Analyst experience in cybersecurity operations and incident…

Experience

1. Security Operations Center Analyst

   Trimedx

   Jan 2023 — Present · US

   Monitor and analyze SIEM logs and alerts through QRadar-Splunk and identify security incidents for remediation and investigation-Performed endpoint investigations and triage analysis through Crowstrike and SentinelOne to identify the timeline of the incident and affected hosts-Analyzing phishing e-mails via Proofpoint and common social engineering linked with phishing attacks- Created tickets in IBM Resilient and escalate them to technical teams in Jira ticketing systems-Managed analysis for files, URLs, IPs and emails to collect information about their possible unwanted activities,using OSINT tools such as VirusTotal,Urlscan.io,MX toolbox,and IPvoid-Periodically perform vulnerability scanning using Nessus and NetSparker to identify newly discovered and unpatched vulnerabilities and report to the technical teams-Familiarity with fundamentals of information security including network technologies and tools. identity and access management, network security-Reviewed existing policies and guidance to ensure compliance with NIST Risk Framework-Knowledge of MITRE ATT & CK Framework to detect and appropriately respond to certain types of attracts-Familiarity with Cyber Kill Chain to improve defense skills by analyzing and mitigating the kill chain- Keep up to date with new cybersecurity threats and remediations from websites like The Hacker News and Threatpost

Education

• Azerbaijan State University of Economics • UNEC

  Bachelor's degree

  2010 — 2014

• Baku State University

  Master's degree

  2015 — 2018