Zohaib Matloob

Cybersecurity graduate (FAST-NUCES) with 2+ years in security engineering and incident response. Led the containment, forensic investigation, and eradication of a live Linux botnet compromise on a multi-tenant production server serving a financial-sector client. Deployed and led a full SOC stack (Wazuh, Suricata, Zeek, Elastic Stack, MISP, TheHive) covering log ingestion, detection rules, alert triage, and automated response. Available for on-site rotating SOC shifts.

Security Engineer - TechSwitch - Remote

(2026-06)

• Led end-to-end incident response on a compromised production MDM server hosting five tenant dashboards including a financial-sector client; triaged host and network telemetry to confirm an Outlaw Linux botnet infection and contained outbound SSH bruteforce abuse at the host firewall.
• Performed in-depth analysis of security events across a 10-week compromise window: process and socket triage, log correlation, 11 MB artefact capture with a 51-file hash manifest, C2 mapping, and IOC extraction for estate-wide sweeping.
• Eradicated all persistence — malicious crontabs, an attacker-installed SSH backdoor key, staging directories, live scanner and IRC backdoor processes — and verified the host in a full post-remediation pass.
• Hardened the host via firewall rule configuration and optimisation (default-deny ruleset, public listening ports cut from 13 to 4, source-restricted SSH, rebuilt fail2ban) and authored the formal incident report with root-cause analysis, credential-exposure assessment, and recommendations escalated to senior management.

MDM Deployment Engineer - TechSwitch - Remote

(2026-01 - 2026-05)

• Onboarded 1,000+ UBank endpoints onto the TechSwitch MDM platform, enforcing endpoint security policy at scale across a mixed fleet; performed full server installation, network integration, and production-readiness validation.
• Validated endpoint controls across enrolled devices: policy enforcement, application distribution, remote wipe, and compliance reporting for client audit requirements.

RPA Engineer - Agility and Innovation - Rawalpindi

(2024-04 - 2025-09)

• Deployed UiPath Orchestrator end-to-end for University of Chicago Medicine, a regulated healthcare environment: IIS/SSL configuration, dedicated application-pool service accounts, and four SQL Server databases under Windows Integrated Authentication.
• Implemented least-privilege access control across the tenant — user and role assignments, folder-level permissions, and Credential Store entries for secure domain-account execution — and supported 13 production automations across three unattended robots.

Bachelor - Cybersecurity - FAST-NUCES (2022-08 - 2026-06)