Khayal Alkathiri

SOC Analyst :
• I was a part of ( LogRhythm) SIEM asset onboarding and parsing confirmation activity, also integrating asset with SIEM.
• Analyzing, documentation of security incidents using the ticketing system .
• Work the required hours to meet the requirements of the 24/7 security operation and solving incidents .

ProofPoint Email Protection Gateway Admin :
• Monitor the organization's inbound and outbound email traffic for unwanted or malicious messages.
• Create and maintain policies and exceptions, troubleshooting reported issues,
• Enable DMARC ( SPF and DKIM ).
• Enable Imposter Email Display Name

FireEye Email Security EX Admin :
• Secure against advanced email attacks.
• Analysis and reviewing the reported email and extracting domain, IP address, URLs, With the help of SAMA & Cert alert, and aware employees.

ForcePoint DLP Admin :
• Track and log event details, charts, graphs, filtered lists, and reports from the Logs & Monitor view,
• Create a policies and exceptions, troubleshooting the reproted issues.


• Conducted organization wide Cybersecurity awareness.

• Familiar with mutliple solutions such as TrendMicro EDR, PaloAlto Firewall, Darktrace NDR, Tenable and PAM.

• Detect Incidents by monitoring the SIEM console, Rules, Reports and Dashboard.
• Monitor the SIEM console resources to identify any anomalies.
• Triages security alerts.
• Collects data and context necessary to initiate Level 2 escalation.
• Monitor the logs 24/7 shift
• Delivers scheduled and ad-hoc reports
• Stay current on Cybersecurity trends and news.

Intensive training that includes specialized training courses and professional certificates in several
fields, such as : Operating System, Network Fundamentals and Cybersecurity, Cyber Defense, Ethical Hacking and Penetration Testing, Threat Detection, Essential Cybersecurity Controls.