Sohaib Hamaydih

▸ Administered and supported the CareWare Hospital Information System (HIS) across OPD, Lab, Radiology, OR,
ER, and Inpatient modules, ensuring secure and compliant handling of patient data and medical records.
▸ Applied information security principles to healthcare workflows, reinforcing understanding of data protection
requirements in regulated environments (HIPAA-adjacent compliance).
▸ Improved operational efficiency by streamlining administrative processes and training staff on HIS best practices.

Completed over 60 hours of SOC training, which deepened my understanding of threat detection,
SIEM monitoring, and incident handling, equipping me to respond effectively to security incidents.
Conducted penetration testing exercises using tools like Nmap, Wireshark, and Burp Suite,
identifying vulnerabilities in our systems, which helped improve our overall security posture.
Enhanced my knowledge in vulnerability assessment and risk analysis, enabling me to develop more
effective mitigation strategies and contribute to reducing potential threats.

▸ Monitored and triaged 50+ daily security alerts using Splunk and QRadar SIEM platforms, reducing mean time to
detect (MTTD) incidents.
▸ Conducted penetration testing exercises using Nmap, Wireshark, and Burp Suite, identifying critical vulnerabilities
and producing remediation reports that improved overall security posture.
▸ Performed vulnerability assessments with Nessus; developed risk scoring and mitigation strategies aligned with
NIST and CIS Benchmarks.
▸ Collaborated cross-functionally with IT and security teams to harden network defenses, including firewall rule
reviews, IDS/IPS tuning, and VPN configuration audits.
▸ Developed a Python-based reconnaissance automation tool integrating subdomain enumeration, port scanning, and
vulnerability identification to accelerate assessment workflows.

Supported SOC operations including log monitoring, incident triage, and alert analysis.
Assisted in identifying vulnerabilities, misconfigurations, and potential threats.
Collaborated with IT and security teams to strengthen the companys defense posture.

▸ Supported SOC operations including log monitoring, incident triage, and alert analysis, gaining hands-on exposure
to real-world threat detection workflows.
▸ Assisted senior analysts in identifying misconfigurations and potential threats across endpoint and network
infrastructure.
▸ Completed 60+ hours of structured SOC training covering SIEM monitoring, threat detection methodologies, and
incident handling playbooks.