Aziz Nouri

Cybersecurity Engineer and Security Analyst with 5+ years of experience supporting MSSP and enterprise environments. Specialized in SIEM engineering, threat detection, incident response, threat hunting, malware analysis, penetration testing, and security operations. Experienced in designing and tuning detection rules, managing centralized log pipelines, and investigating advanced threats across endpoint, network, identity, and cloud environments.

Skilled in EDR/XDR platforms, vulnerability management, phishing investigations, MITRE ATT&CK mapping, and security automation. Proven ability to improve security visibility, reduce organizational risk, and respond effectively to high-impact security incidents.

Cybersecurity Engineer / Security Analyst (MSSP) - Onward Technology - Chicago, IL

(2022-02)

• Design, develop, and optimize SIEM detection rules and centralized log ingestion pipelines using syslog, APIs, and agent-based collection methods for real-time threat monitoring and alerting.
• Monitor, analyze, and investigate cybersecurity events across endpoint, network, identity, and cloud environments for multiple enterprise clients.
• Implement and manage layered security controls including EDR/XDR solutions, firewalls, IDS/IPS, DLP technologies, MFA enforcement, and identity monitoring platforms.
• Conduct proactive threat hunting, malware analysis, phishing investigations, vulnerability assessments, and penetration testing aligned with MITRE ATT&CK methodologies.
• Investigate and contain high-severity security incidents including ransomware infections, credential compromise, suspicious authentication activity, privilege escalation, and lateral movement attempts.
• Coordinate vulnerability remediation and patch management efforts across servers, endpoints, and cloud infrastructure using risk-based prioritization strategies.
• Conducted 40+ penetration tests, vulnerability assessments, and phishing investigations across network, cloud, endpoint, and web application environments, helping reduce exploitable attack surfaces and strengthen client security posture.
• Collaborate with cross-functional teams to improve detection coverage, reduce false positives, enhance threat visibility, and optimize incident response processes.
• Produce detailed security findings, technical reports, and remediation recommendations for clients and stakeholders.

NOC / Security Operations Analyst - Netrix LLC - Mount Prospect, IL

(2021-09 - 2022-01)

• Monitored enterprise network infrastructure, data center systems, and security alerts to maintain operational stability and security posture.
• Investigated operational incidents and escalated security-related anomalies to engineering and security teams for rapid remediation.
• Managed access control systems, visitor management processes, and physical security operations.
• Assisted with compliance initiatives supporting SOC 2, PCI-DSS, and HIPAA security requirements.
• Maintained incident documentation, ticketing workflows, operational reporting, and audit-ready security records.
• Supported security monitoring, event correlation, and incident tracking activities to improve operational visibility.

Associate Degree in Applied Science - Ethical Hacking & Cybersecurity - Wilbur Wright College

Bachelor's Degree - Public International Law - University of Moulay Ismail