About
Experience
5+ years in cyber security, the last 2.5 focused on cyber threat intelligence.
Senior Threat Intelligence Analyst · HexaPrime Technology (MSSP)
- Produce tactical, operational and strategic threat-intelligence advisories on Iran-nexus APTs, hacktivist clusters, ransomware affiliates and dark-web data brokers, graded TLP:AMBER and above for CISO and operational distribution
- Author in-depth actor profiles (TTPs, targeting, infrastructure, ATT&CK mapping) on Iran-nexus groups including Handala Hack (Void Manticore / Storm-0842), Pulsar Kitten, Banished Kitten, Nasir Security and Fatemiyoun Electronic Team
- Built a predictive intelligence assessment that scores threat actors on a five-dimension weighted model using Adversarial Pattern Analysis, and forecast two attacks against a government organization before they occurred
- Developed a six-phase CTI prediction methodology grounded in SANS FOR578, the Diamond Model, MITRE ATT&CK and Admiralty source grading
- Led incident and breach-claim analysis of hacktivist leak claims against UAE government and critical-infrastructure entities, separating verified compromise from exaggerated or recycled data
- Monitor dark web forums, marketplaces, leak sites and Telegram; run OSINT attribution on actor handles and support domain takedowns
- Produce a weekly executive threat landscape report for C-level leadership with actor and vulnerability risk scoring, business risk impact and ATT&CK heatmaps, plus monthly and weekly regional CTI reports
- Run hypothesis-driven threat hunts in KQL (Microsoft Sentinel) and CQL (CrowdStrike Falcon) across Windows and Linux endpoint telemetry
- Manage the IOC lifecycle (ingestion, enrichment, deduplication, expiry) with YARA and Sigma across Anomali ThreatStream, LogRhythm, CrowdStrike and Proofpoint
- Deployed 80 detection rules across SIEM and EDR, translating intelligence and ATT&CK techniques into production use cases; tuned 20 high-noise detections using GitHub-based detection-as-code
- Built FortiSOAR and D3 SOAR playbooks for IOC block-listing, enrichment, phishing triage and EDR isolation, and automated DESC alerting that sustains a DESC score of 4.5-4.9
- Led deep-dive investigations and root cause analysis of escalated incidents; delivered monthly incident reports for steering committee reviews
- Managed L1 quality assurance and coaching, and authored platform and threat intelligence documentation aligned with SOC-CMM v2.2
SOC Analyst (L1) · CyberProof (UST Global)
- Configured and monitored SIEM platforms across multiple MSSP tenants, hunting proactively for IOCs in QRadar, LogRhythm and Carbon Black EDR using indicators from the central Threat Intelligence Team
- Operated incident response and SOAR tooling (CrowdStrike, Carbon Black, Microsoft Defender, Azure SOAR) to support containment; analysed payloads using Snorby (Snort IDS) and FortiGate NGFW IPS logs
- Maintained IOC reference sets in QRadar and LogRhythm; investigated Active Directory audit logs for credential misuse, privilege escalation and lateral movement
- Followed runbooks for BAU and high-severity incidents, escalating to L2/L3 with ATT&CK-mapped triage notes; produced daily, weekly and monthly SOC KPI reports
Penetration Tester · Freelance
- Performed black-box and grey-box penetration tests on web applications, networks and Active Directory using Nmap, Nessus, Burp Suite Pro and Metasploit
- Developed OSINT collection workflows for social-engineering and intelligence-gathering engagements
Skills
Threat Intelligence
Threat Hunting & Detection
SOAR & Automation
AI for Security
Certifications
SOLOL Infiltration Specialist
SOLOL · 2025
Certified Red Team Operator (CRTO)
Zero-Point Security · 2024
D3 SOAR Technical Training, Levels 1-3
D3 Security · 2024
eLearnSecurity Certified Incident Responder (eCIR)
INE · 2024
Purple Teaming Fundamentals
CyberWarFare Labs · 2024
eLearnSecurity Junior Penetration Tester (eJPT)
INE · 2023
Certified Ethical Hacker (CEH)
EC-Council · 2021
Certified Penetration Tester (CPT)
Red Team Hacker Academy · 2021
MITRE ATT&CK Defender Fundamentals
Cybrary · 2021