Open to opportunities

ALI Fharmah

@alifharmah

Message

SOC-focused cybersecurity analyst delivering threat detection, response, and cloud security.

Nigeria

Message

What I'm looking for

I’m looking for a SOC-focused cybersecurity role where I can build detections, runbooks, and SOAR patterns, improve incident response speed, and apply cloud security and vulnerability management to real environments.

I’m a results-driven Cybersecurity Analyst with hands-on SOC experience across multiple internships and consulting engagements, focused on turning security engineering into operational impact. I’ve engineered SIEM detections and response workflows from the ground up, including SIEM engineering with Splunk and playbooks for ransomware preparation, detection, containment, eradication, and recovery.

In my recent consulting work, I designed a full ransomware SOC playbook for a 1,200-bed healthcare environment by building Splunk correlation searches, developing YARA rules and integrating with MISP for automated IoC ingestion, and producing HIPAA-aligned breach notification templates and post-incident RCA documentation. I also built real-time AWS threat detection with automated kill-switch response using CloudWatch, EventBridge, and Lambda, and I led a credentialed vulnerability assessment and automated patch orchestration for Apache Tomcat using Nessus and Ansible. My approach consistently blends threat detection, incident response, malware analysis, network forensics, and cloud security to reduce time-to-contain and strengthen resilience.

Experience

Work history, roles, and key accomplishments

Cybersecurity Intern

Redynox Team

Jun 2025 - Jul 2025 (1 month)

Monitored and analyzed security events in a live 24/7 SOC environment. Supported advanced threat hunting and incident triage, documented incidents, and contributed to post-incident reports.

SOC Operations Threat Hunting Triage

Cybersecurity Intern

Prodigy Infotech

Feb 2025 - May 2025 (3 months)

Completed practical labs in penetration testing, log review, and endpoint security. Gained hands-on exposure to SOC workflows and reporting best practices.

Penetration Testing Endpoint Security SOC Workflow Exposure

Junior Cybersecurity Analyst

Safety Network Society

Jan 2025 - May 2025 (4 months)

Monitored network traffic and SIEM alerts to identify anomalous activity and assisted with vulnerability assessments and remediation planning. Participated in threat intelligence gathering and contributed to weekly security briefings.

Anomaly Detection Vulnerability Assessment Threat Intelligence Security Briefings

Business Development Executive

Idave Incorporated Ventures

Apr 2022 - May 2024 (2 years 1 month)

Developed communication and stakeholder engagement skills and strengthened documentation practices in support of client-facing work relevant to security roles.

Business Development Stakeholder Engagement Client Communication Technical Documentation

SOC Analyst Consultant

Amdari

Jan 2026 - Present (5 months)

Designed and delivered a ransomware incident response SOC playbook for HarborPoint Health (1,200+ inpatient beds) covering preparation, detection, containment, eradication, and recovery. Engineered Splunk detections and YARA rules integrated with MISP, performed network forensics with Wireshark/Zeek, and produced SOAR containment runbooks and HIPAA-compliant breach notification templates.

Splunk SIEM Correlation Searches YARA MISP Incident Response Wireshark Zeek Root Cause Analysis