Nazir Mohammed

Entry-level SOC Analyst with hands-on training in security monitoring, log analysis, and incident triage. Experienced in using Sumo Logic SIEM tool to investigate alerts, analyze logs, and identify potential security threats. Highly motivated to learn, detail-oriented, and eager to contribute to a security operations team.

Security Analyst (SOC) Trainee at CTG Security Solutions (2025-01 – Present)

Managed Cyber Security operations/Incident response including event monitoring which includes incident detection/response/mitigation for in house security projects. Operations includes threat hunting, Host analysis, malware analysis.

• Perform Advanced Threat Investigation source from SOC monitoring. Take action to block in all security devices and track down the infected system to remediate.
• Using analysis tools to continuously monitor and analyze real time logs for any suspicious event.
• Monitoring organization's network for security breaches and investigating violation when one occurs.
• Experience in network traffic analysis of packet capture data, net flow, IPS/IDS and custom sensor output.
• Malware Hunting: Process and track down the infected Workstation/server to remediate.
• Handling Cyber and Data Security Incidents.
• Detecting Malware infected issues, analysis and removal from Network.
• Handling Spam Attacks, Spam Mail Analysis, IOC, and Attachment Analysis.
• Malware Analysis, Sandboxing (Threat Grid, Hybrid Analysis).
• Sumo Logic - event monitoring which includes incident detection, investigation and remediation. Tracking and analyzing on real time use cases and creating basic rules for SIEM, report generation.
• Bluecoat Proxy – Able to handle the request of blocking and whitelisting the URL.
• Antivirus (McAfee, Symantec) – Analyzing Av logs and creating dash boards for SEP Av, where it predicting most expected infections for next week's/months using machine learning Algorithms.
• Sandbox (Threat Grid, Hybrid analysis and Virus Total) – we use these tools during investigation for better analysis.
• CISCO IPS - Analysis of traffic, detections and remediation of infections with help of PCAP Files, HTTP status codes and HTTP return methods.
• Jira(Ticketing tool) – Tool used for Managing all the security department tickets and trace back with investigation notes.

Master of Computer Application in Computer Application – Madhav University

Bachelor of Science in Computer Science – Guru Gobind Tribal University