Imran Kh

Project: DSB (Denmark Railway)
• Monitor, analyse and review security alerts, providing L2 resolution to incidents and investigating new threats.
• SIEM security administration, parser development, Use case development, report, and Dashboard configuration.
• Spearheading the SOC team and its operations, guiding L1 analyst and serving as the SPOC to the customer.
• Responsible for the creation and delivery of weekly and monthly security reports to stakeholders.
• Developed and fine-tuned use cases for threat detection, improving the accuracy and efficiency of security operations.
• Develop the playbook for defined use cases.
• Managed the installation of wincollect agent, integrating new log sources and software with the security platform IBM QROC 7.5, enhancing monitoring capabilities.
• Managed EPS, optimizing system capacity and performance for large-scale data ingestion.
• Handling DDOS attacks in collaboration with the cloud team, contributing to the final investigation and resolution process.
• Monitoring Microsoft azure security center and Defender 365 alerts, enhancing threat detection and response capabilities.
• Performed advanced troubleshooting and analytics on security activities, tools, log sources and other system components, ensuring optimal performance and security.
• Conducted regular health checks of security platforms, ensuring system integrity and performance.
• Collaborate with other subdomains of cybersecurity, enhancing the integrated security response.
• Assisting new team members in the on boarding process, ensuring a smooth transition into the team.