Usamh Khaldoon

My journey as a SOC Engineer is defined by a hands-on commitment to SIEM solutions, monitoring tools, EDR management, vulnerability assessment, threat hunting and incident response.

SOC Engineer at Technology Source (2026-01 – 2026-07)

• Monitoring, tuning, threat hunting, using multiple vendors of SIEM Solutions on Staging, DR and Production environment.
• Patching and update (SIEM, EDR, Nessus).
• Collaborate with internal and external auditors to make sure the organization maintains continuous compliance with regulatory standards and frameworks.
• Vulnerability assessment, reporting using Nessus and send the report to other information technology teams to start the remediation and security hardening and follow up with them to make sure all weaknesses and vulnerabilities closed.
• Administrate and mange EDR groups, application's exceptions, USB block…etc.
• Deep investigation: windows event viewer and Sysmon…etc., Using SIEM to look for login alerts (SSH, RDP, brute force…. etc.), files create delete modify alerts, users' activity's alerts, security logs deleting alerts, payloads exploit alerts, PowerShell / CMD execution alerts, security agent down alert…. Etc.
• Files, IP and URL Scans using Virus Total, Urlscan.io, Whois hurricane bgp, emailable.

Communication Engineering – University of Diyala