Uzma Aslam

SOC L2 Analyst responsible for advanced threat analysis, incident
investigation, and escalation handling to ensure effective cybersecurity
operations.
Skilled in deploying and configuring SentinelOne EDR solutions, ensuring
seamless integration, policy setup, and endpoint protection across diverse
environments.
Skilled in deploying and configuring Trend Vision One XDR solutions,
ensuring seamless integration, policy setup, and endpoint protection across
diverse environments.
Consultancy for Saudi Aramcos Third-Party Cybersecurity Standard (SACS
002)
Compliance consultancy for SAMA, ISO27001-2022
Managing & Conducting Information Security Training.
Infrastructure Security Assessment & Gap Analysis.
Development, implementation, and enforcement of information security
policies and procedures.
Perform penetration testing activities on infrastructure Applications based
on industry standards.
Experienced in preparing tailored proposals for customers, including
technical, financial, and solution-oriented content to meet client needs and
business goals.

Working on compliance Standards like ISO27001, AramcoCCC, CCC+.
Developing and providing employee training on compliance policies,
practices, and reporting systems
Preparing and filing compliance reports
Consulting with the legal department and advising leadership and
management on compliance matters
Security deployments including EDR/Antivirus, Firewall, etc.
Monitor and analyze security alerts and events to identify potential threats
and vulnerabilities

Conducted controlled penetration tests on networks, applications, and
systems to identify and exploit security vulnerabilities, helping to enhance
overall security posture.
Performed comprehensive vulnerability assessments using automated
tools and manual techniques to identify, analyze, and prioritize security
risks across systems and applications.
Security Audits: Conducted in-depth reviews of security controls,
configurations, and policies to ensure compliance with industry standards
and best practices.
Report Writing: Developed clear, detailed reports highlighting identified
vulnerabilities, associated risks, and actionable remediation
recommendations.
Tool Usage: Utilized industry-standard tools such as Metasploit, Burp
Suite, Nmap, and Wireshark for testing, analysis, and reporting.