Muhammad Anus
SOC ANALYST | THREAT DETECTION | INCIDENT RESPONSE | SECURITY MONITORING
Hire this person
Send a job offer directly to this candidate
About
Cybersecurity professional with 1+ years of SOC experience specializing in SIEM-based alert triage, threat investigation, and incident response within a 24x7 rotating shift environment. Skilled in IOC/IOA analysis, MITRE ATT&CK Framework application, and case management using ticketing systems (GLPI) across network, endpoint, and email security. Known for cross-team collaboration to ensure timely escalation and remediation.
BS in Cybersecurity with a foundation in penetration testing and ethical hacking.
Experience
SOC L1 at IT Butler E-Services (2026-02 – 2026-07)
- Monitored and triaged an average of 50–100 security events/alerts daily within a 24x7 rotational shift environment, using IBM QRadar, Elastic, Darktrace, and Trend Micro to identify threats and anomalies across the environment.
- Investigated network, endpoint, Windows, Linux, TCP/IP, DNS, and HTTP logs to identify IOCs and IOAs, supporting incident response for 15–20 incidents per month.
- Applied the MITRE ATT&CK Framework and Cyber Kill Chain during alert triage, improving mean time to detect and reducing incident analysis time by roughly 20–30%.
- Analyzed phishing emails, malicious URLs, and email headers (SPF, DKIM, DMARC), catching 5-10 email-based threats before they reached end users.
- Correlated SIEM alerts across multiple log sources, reducing false positives by 15-25% and improving detection accuracy for the SOC team.
- Investigated EDR/XDR alerts using Trend Micro and Darktrace, resolving 90% of endpoint incidents within SLA.
- Collaborated with SOC and IT teams to validate and escalate incidents, supporting faster remediation turnaround across the team.
- Logged, tracked, and managed security incidents using the GLPI ticketing system, ensuring accurate documentation and timely escalation to relevant teams.
Security Analyst at District Health Authority (2024-12 – 2025-06)
- Supported system maintenance, data management, and network troubleshooting.
- Monitored systems to detect vulnerabilities and applied basic security measures.
- Provided Security support to staff, enhancing cybersecurity awareness.
Cyber Security Intern at DevVerse IT Solutions (2024-09 – 2024-11)
- Assisted in configuring and maintaining firewall rules and network security controls to strengthen organizational security.
- Monitored security events, investigated alerts, and supported threat detection and incident response activities.
Education
BS in Cybersecurity – KFUEIT (2024-08)
