أبرار حسين

Perform and lead reactive incident response functions including but not limited to: host-based
analysis functions through investigating Windows, Linux.
• Lead incident simulations, helping clients assess their ability to respond to major threats
within their existing toolsets.
• Incorporate external threat intelligence sources related to zero-day attacks, exploit.
kits and malware into detection tools.
• Prepared digital forensic playbook that scope the organization digital forensic capabilities.
and stated step by step guide for doing memory collection, analysis, and disk imaging.
• Examine security monitoring use cases and develop and tune supporting content in-line with MITRE
framework for security tools such as SIEM platform and EDR tools.
• Briefing weekly to senior leadership on cybersecurity risk and advocate for managing risk.

Project, November 2023- February 2024: (AFC 2024 Qatar)

• Led the SOC monitoring shifts and performing end to end analysis on security tickets.
escalated by L-1 team to meet the SLA.
• Providing daily reports to senior management on incidents before and after matches.
• Identify threats related to Qatar using open-source threat feeds and brand intelligence.
• Identify missing security controls such as use-case validation and fine-tuning.

Project, April 2022- January 2023: (FIFA 2022 Qatar)



• Led the SOC monitoring shifts and performing end to end analysis on security tickets.
escalated by L-1 team to meet the SLA.
• Create and support vulnerability and asset health metrics, remediation-related dashboards,
and reports using Rapid7 product.
• Designed the High-level (HLD) and Low-Level Design document (LLD) for deployment of
threat intelligence, patch management and vulnerability management solution.
• Carried out due diligence by proposing the acceptance test criteria (ATP Testing) for
auditing the deployments.

• Detect, analyze, and report precursors or indicators with the Help of end-point security solution,
proactive threat intelligence and SIEM solution.
• Escalate true positive incidents to right department and engage top management for clear
transparency.
• Participate in Malware campaigns and malware analysis. including Static, Dynamic and Reverse
analyzing OLE format files mostly.
• Interface and communicate with server owners, system custodians, and contacts relevant
departments to pursue security incident response activities, including obtaining access to systems,
digital artifact collection, and containment and remediation actions.

Remote US

• Developed and executed security test plans based on customer use cases and technologies.
• Escalate applicable advisories to relevant department for patching.
• Conducted penetration testing on in-house devices and client environment. Analyse customer risk
level, identify areas of exposure, exploit weaknesses, and make relevant recommendations based
upon that knowledge.
• Performed deep analysis and provided recommendations about systems, vulnerabilities, security
controls, and recommended improvements which are consistent with business goals.
• Performed red teaming task in a red team along with writing python scripts according to
given tasks.