Sirin AlSaleh

Detail-oriented Security Operations Center (SOC) Engineer with 6+ years of experience in cybersecurity incident detection, analysis, and response. Highly skilled in utilizing SIEM technologies, threat intelligence platforms, and security tools. Demonstrate ability to investigate complex security incidents, automate detection processes, and implement security improvements. Strong communicator who thrives in fast-paced environments.

• Execute day to day SOC Operations
• Develop and enhance SOC and IR Processes during shift
• Work as SOC Assistant for Lvl1 SOC analysts and help SOC Management for any tasks that required advanced experience in SOC Operation
• Manage Lvl1 SOC and work process during shifts
• Respond on a timely manner (as per and within documented SLA) to support teams, incidents, and other tickets/ cases
• Monitor and manage artefacts and intelligence hosts by threat intel platforms
• Analysis and involving in rules tuning and optimize threat intelligence platforms
• Conducting incident handling and coordinating with both parties, SOC analysts and RE’s
• Performing IR and Threat hunting
• Training of new team members in SOC and involved with extensive knowledge transfer to new hires around RSA ECAT, RSA SIEM, Forensics, and packet capture
• Engaging with other system engineers and network engineers within the company to obtain a high level of support and teamwork
• Cooperating with SOC Lead and RE’s to ensure maintaining the correct work process through SOC department and working on enhancing it
• Adhering to Enhancement Plans for SOC Operations provided by SOC Lead to enhance the operation service and service level to achieve customer satisfaction
• Providing periodic weekly, monthly, and yearly reports as needed and advised by RE’s and SOC Lead
• Provide comprehensive incident analysis reports as per customers’ requests
• Provide threat hunting reports as advised by SOC Lead to help RE’s in their tuning and threat mitigation