Layan Talal Osta

I am a Cybersecurity Specialist with over 3 years of experience in cybersecurity and Security Operations Centers (SOC). I hold a Bachelor's degree in Cybersecurity and started my career after completing a training program at Tuwaiq Academy. As a SOC Analyst, I gained hands-on experience across L1, L2, and L3 SOC operations, including security monitoring, incident investigation, and incident response.

I currently work as a Cybersecurity Specialist, contributing to various cybersecurity projects while continuously expanding my technical knowledge and skills.

Cyber Security Specialist - Tatweer Educational Technologies - Riyadh, Saudi Arabia

(2026-02)

• Contributed to the implementation of Data Loss Prevention (DLP) solutions.
• Implemented and managed Cofense PhishMe phishing simulation campaigns.
• Developed and optimized IBM QRadar correlation rules to improve threat detection.
• Created and maintained SOAR playbooks to automate incident response workflows.
• Managed security requests and tracked incidents using the BMC ticketing system.
• Collaborated with internal teams to support cybersecurity projects and improve security operations.

SOC Analyst - Ministry of Education - Riyadh

(2023-04 - 2026)

• Conducted continuous security monitoring, incident response, data loss prevention, vulnerability management, threat intelligence, and threat hunting.
• Performed in-depth analysis and assessment of alerts from various security tools, including IDPS, SIEM, and firewalls.
• Investigated and responded to security incidents following defined procedures and playbooks.
• Ensured seamless operation of Security Operations Center (SOC) systems and tools.
• Collaborated with internal teams and external vendors to troubleshoot and resolve technical issues.
• Prepared detailed and well-structured reports on high-severity incidents.
• Utilized IBM QRadar SIEM and QRadar SOAR for efficient threat detection, analysis, and coordinated response.
• Used CrowdStrike Falcon for advanced endpoint detection and threat investigation.
• Monitored and managed Trend Micro security solutions for comprehensive protection against malware and endpoint threats.
• Configured and maintained Cisco Email Security Gateway to defend against phishing and malware attacks.
• Demonstrated strong skills in creating clear, concise, and actionable incident reports.

Cybersecurity trainee - Lebara Mobile KSA - Riyadh

(2023-01 - 2023-03)

• Identifying vulnerable systems and suggesting changes to fix weaknesses
• Testing and evaluating systems, networks and digital assets for potential threats
• analyzing logs through SIEM Solution (IBM QRadar)
• enabled Sysmon-logs and analyzing logs through event viewer
• understanding and applying the cybersecurity regulatory framework from CITC
• Provided basic support in risk-related tasks

Cybersecurity Boot camp - Tuwaiq Academy - Riyadh

(2022-07 - 2022-11)

• Security operations and Defensive analysis
• SOC Technologies
• SOC-100 Program
• OSDA Program

Bachelor's - Computer Science and Engineering: Cybersecurity - University of Jeddah (2018-04 - 2022-07)