أسماء مصطفي

Lead L1 team operations; investigate advanced threats using SIEM,
SOAR, EDR, XDR, and NDR; develop automated playbooks; optimize
detection rules; conduct threat hunting and vulnerability assessments;
collaborate on remediation; and report SOC KPIs to leadership.

Delivered a Cisco networking fundamentals course as a volunteer. Organized Zakat fund collection & community support projects.

Remote Job of Security Operations center analyst with the following: • Monitoring the SIEM alerts generated by multiple security devices like firewalls intrusion detection systems, web application firewalls, anti-virus, etc... • Monitoring security intelligence feeds and emerging threats. that may impact our environment and take suitable remediation. • Analyzing the offenses, eliminating false positives, and escalating the true positive with recommended action to the designated person. • Make recommendations for tuning the misconfigured use cases and creating daily reports. • Investigate malicious phishing emails, domains, and IPs using Open-Source tools and recommend proper blocking based on analysis. • Respond to and investigate security incidents and Reporting real-time threats and detection. • Responsible

Monitored and analyzed security alerts from NGFW, IDS/IPS, WAF, and
EDR; performed triage and escalation; tuned use cases; conducted
EDR investigations; used OSINT for threat analysis; and trained new
analysts. Managed backups
(VEEAM, Backup Exec), administered AS400, Windows, and Linux
servers, monitored systems via Nagios, and provided IT support to
French clients via ITSM tools.

Monitored and analyzed security alerts from NGFW, IDS/IPS, WAF, and EDR; performed
triage and escalation; tuned use cases; conducted EDR investigations; used OSINT for
threat analysis; and trained new analysts.

Remotely working as an Information Technology Engineer at CORELIA company (French and
English Languages) from Jan 2021 till now with the following
responsibilities:
1- Use of the backup tools VEEAM and BACKUP EXEC.
2- Working on servers with AS400 OS and windows server OS.
3- Monitoring of backups and replication between servers.
4- Reporting and Monitoring and control of customer servers via the NAGIOS tool.
5- Assisting customers through emails and remote sessions.
6- Perform role specific training on tools and programs that each team uses on a daily basis.
7- Deal with the KOALY ticketing system and open tickets for any French customer support
alerts via email and remote sessions.
8- Rotation of Volumes for the backup.

Managed backups
(VEEAM, Backup Exec), administered AS400, Windows, and Linux servers, monitored
systems via Nagios, and provided IT support to French clients via ITSM tools.

Administered storage, backups, and Microsoft systems; monitored infrastructure using
BMC tools; handled incidents via YOGA ticketing system.