Looking for a job

Abdulla Suleymanov

@abdullasuleymanov

SOC Tier 2 Analyst at Sysco investigating security alerts and identifying detection opportunities across client networks.

Poland

Message

At Sysco, I investigate security alerts across Microsoft Sentinel and endpoint platforms, correlating endpoint, identity, and network events. I use KQL and endpoint evidence to distinguish false positives and assess incident severity.

At IBM, I monitored client environments in QRadar, investigated attack patterns, and tuned rules to reduce false-positive alerts. I also applied threat intelligence and MITRE ATT&CK in incident reports and compliance monitoring.

Earlier, as a SOC Analyst at PUREITCON and Wise Quarter, I investigated events and indicators using Splunk, examined Windows artifacts, and applied the Cyber Kill Chain and MITRE ATT&CK to classify observed techniques.

Experience

Work history, roles, and key accomplishments

Current

SOC Tier 2 Analyst

Current

Sysco

Jan 2026 - Present (9 months)

Investigate 50+ security alerts daily across Microsoft Sentinel and EDR/XDR platforms, correlating endpoint, identity, and network events to reduce average Triage Time by 25%. Use KQL and endpoint evidence to distinguish false positives, achieving a 30% reduction in unnecessary escalations.

Microsoft Sentinel Microsoft Defender SentinelOne Palo Alto Cortex KQL ServiceNow MITRE ATT&CK Threat Hunting

Security Consultant (Threat Management Analyst)

IBM

Jan 2024 - Jan 2026 (2 years)

Monitored enterprise environments across 10+ client instances in IBM QRadar and investigated correlated alerts, improving Mean Time to Detect (MTTD) by 20%. Used AQL and multi-source logs to investigate attack patterns and tune QRadar rules, cutting noise and false-positive alerts by 35%.

IBM QRadar AQL MITRE ATT&CK Threat Intelligence PCI DSS GDPR Incident Reporting Dashboarding

SOC Analyst

PUREITCON

Jan 2024 - Dec 2024 (11 months)

Monitored security events and network logs in Splunk to identify suspicious traffic and indicators of compromise for investigation. Used Maltego and Shodan for OSINT research and Nessus for vulnerability assessment, connecting threat indicators with remediation priorities.

Splunk Maltego Shodan Nessus OSINT Incident Response Windows Forensic Investigation

SOC Analyst

Wise Quarter

Jan 2023 - Dec 2023 (11 months)

Reviewed security events and attacker indicators in Splunk, building practical experience in alert investigation and escalation. Analyzed malware behavior, endpoint evidence and network activity to develop a clearer picture of suspicious activity and possible persistence.

Splunk Malware Analysis Endpoint Forensics Cyber Kill Chain MITRE ATT&CK