Jawad Iqbal

Cybersecurity Operations Specialist & CSOC Leader with extensive experience driving 24/7 incident response, SIEM/SOAR engineering, and threat detection across enterprise environments. Expertise in aligning security controls with NIST/CIS frameworks, managing multi-platform EDR/NDR solutions (Sentinel, CrowdStrike, Darktrace), and executing comprehensive disaster recovery, vulnerability management, and compliance programs (SOC 2, FERPA, GLBA).

Cybersecurity Specialist - Merced Community College District - Merced, California, United States Of America (USA)

(2025-07)

Direct and manage 24/7 Cybersecurity Operations Center (CSOC) operations and incident triage, establishing standardized SOPs and playbooks to enforce audit-ready execution. Partner directly with the CISO to implement and maintain security policies, standards, and NIST/CIS CSF controls across server, network, and endpoint environments. Monitor, investigate, and mitigate security incidents using Microsoft Sentinel (SIEM/SOAR), Defender XDR, Darktrace, and CrowdStrike Falcon, coordinating cross-functional remediation.

Engineer custom SIEM correlation rules and tune detection logic to reduce false positives and accelerate triage. Deploy and administer EDR/NDR platforms across Windows, macOS, and Linux endpoints, managing agent health and isolation policies. Lead vulnerability management via Tenable while supporting TPRM and compliance evidence collection via BitSight and Vanta (FERPA, SOC 2, GLBA).

Manage identity and endpoint governance via Entra ID, Active Directory, Intune, and ME

SOC Security Analyst - Tesla Inc - Client of Cdatasystems - Fremont California, United States Of America (USA)

(2023-09 - 2025-07)

• Serve as the primary line of defense, driving rapid detection, triage, and incident response using security monitoring and automation platforms.
• Partner across NOC, IT, and business units to investigate, correlate, and remediate security incidents and alerts across network, OS, and application logs.
• Perform deep-dive analysis of security events and log sources to identify real-world attacker techniques, reporting threats and recommending automated or manual remediation.
• Collaborate with Detection and Splunk teams to engineer, tune, and refine correlation rules and signals, significantly reducing false positives and accelerating response times.
• Author, update, and maintain comprehensive Security Operations Center (SOC) standards, procedures, and response playbooks.
• Conduct memory/disk artifact analysis, scope compromised assets, map adversary TTPs to MITRE ATT&CK, and execute endpoint containment protocols.
• Perform initial static/dynamic malware sandbox analysis, dissect malicious email

Infrastructure and Security Analyst - Adir International Curacao - Los Angeles, California, United States Of America (USA)

(2022-08 - 2023-09)

• Lead and support security initiatives across vulnerability management, IT asset inventory, endpoint security controls, and gold desktop image hardening.
• Triage and resolve security incident response cases, privileged access management requests, and complex IT/SOC troubleshooting tickets.
• Develop technical remediation solutions to address security weaknesses, partnering with cross-functional stakeholders to enforce implementation.
• Administer Veeam backup, restore, and retention policies while managing Disaster Recovery (DR) and Business Continuity (BCP) documentation and SOPs.
• Implement best practices and align procedures with industry cybersecurity frameworks, including CIS Controls and NIST standards.
• Audit security configurations across firewalls, IPS, enterprise network architecture, cloud infrastructure, and business applications.
• Conduct technical security evaluations across web applications, mobile platforms, and data encryption mechanisms to maintain confidentiality.

Application Security Intern - Celly Service Inc. - Long Beach, California, United States Of America (USA)

(2022-06 - 2022-08)

• Development of CCPA and CPRA privacy law solution and guidance for clients
• Cybersecurity awareness and information security trainings for businesses
• Vulnerability assessment on client infrastructure & report sharing.
• CIS level 2 Implementation and Risk assessment against benchmarks
• Network monitoring, forensics, and log analytics
• Hardening of operating systems and devices
• Disaster recovery and replication initiative
• Report preparation, sharing and support to clients.
• Understand the current model of Occupational Health and Training
• Work with developers to produce training portal
• Do a needs analysis with clients to develop features required in the new portal
• Research technologies required to complete training requirements
• Perform security analysis and audit at client location.
• Provide guidance to create policies to resolve vulnerability and compliance issues.

IT Assistant - California State University - Carson, California, United States Of America (USA)

(2022-03 - 2022-05)

• Maintain and support the network infrastructure by updating all systems and databases with attention to details.
• Complete troubleshooting and setup of student and faculty accounts over multiple platforms
• Response to phone and email service requests by issuing problem description ticket.
• Developed new procedures which significantly reduced paperwork and increased efficiency.
• Update security information notes and logs at close of each shift
• Network Infrastructure Support & Inventory Management

Master of Science - Cyber Security - California State University, Dominguez Hills, United States Of America (USA) (2023 - 2023)

Bachelor of Technology/Engineering - Electronics/Telecomunication - COMSATS Institute of Information Technology, Pakistan (2015 - 2015)