Ahmad Raza

• Managed and monitored TrendAI Vision One HIDS/HIPS modules, analyzing alerts and performing investigations.
• Integrated third-party tools to enhance visibility and response capabilities; modified detection rules.
• Actively monitor the ServiceNow dashboard for new security incidents and service requests.
• Managed regular updates and patches for AV/EDR software to ensure endpoint security integrity.
• Maintained SOPs and use cases to ensure documentation reflects current security controls.

• Monitored and analyzed security incidents using SIEM, NIDS, EDR, and WAF platforms.
• Leveraged AWS and GCP services, analyzing CloudWatch and CloudTrail logs for anomalies.
• Executed comprehensive phishing assessments and email analysis using KnowBe4.

• Investigated malicious phishing emails, domains, and IPs via OSINT, analyzing patterns and behaviors.
• Applied knowledge of ISO 27001, OWASP, AppSec, IAM, Cyber Kill Chain, and NIST.
• Analyzed threat intelligence to mitigate vulnerabilities and provide proactive security insights.
• Monitored network traffic and endpoint logs to identify and contain potential intrusions.

• Utilized IBM QRadar for real-time monitoring, threat detection, and incident response.
• Orchestrated investigation and containment of security breaches with cross-functional teams.