
Abdul Rehman
SOC Analyst, Threat Detection, System Monitoring, Linux Security
Habilidades

Conheça meus serviços


Portfólio
Experiência profissional
Intern
Al Nafi International College • Período integral
Dec 2024 - Present • 1 yr 5 mos
Completed a full-year, hands-on Cyber Security Internship alongside a Diploma in Cloud Cyber Security at Al Nafi International College, focused on real-world SOC operations, SIEM monitoring, cloud security, and incident response. Worked in simulated enterprise environments performing daily tasks aligned with a Junior Cyber Security Analyst / SOC Analyst (L1) role. Designed, deployed, and managed SIEM solutions using Wazuh, integrating Linux endpoints for centralized log collection, real-time alerting, file integrity monitoring (FIM), vulnerability detection, and CIS-based configuration assessments. Analyzed security alerts by reviewing rule IDs, decoders, severity levels, and event context to identify true positives and false positives using structured SOC triage workflows. Built and operated a SOC ecosystem using Wazuh, TheHive, and MISP, converting alerts into incident cases, enriching them with threat intelligence (IPs, domains, hashes), and documenting response actions. Mapped activities to the MITRE ATT&CK framework to support threat analysis, escalation, and reporting. Performed incident investigation and remediation documentation in line with SOC best practices. Worked extensively with Linux administration, security hardening, log analysis, and system monitoring. Gained hands-on exposure to AWS cloud security monitoring, including CloudTrail log analysis for IAM and cloud activity visibility. Practiced threat intelligence analysis, IOC handling, and basic automation using Python and Bash. Participated in industry job simulations (Deloitte, AIG, TATA, Datacom, Telstra) to understand enterprise security operations, documentation, and communication standards. Developed strong reporting skills by producing security findings, compliance observations, and incident summaries aligned with ISO/IEC 27001 and SOC requirements. This internship provided continuous practical exposure to cybersecurity operations, preparing me for entry-level Cyber Security Analyst and