Open to opportunities

Ashfaq Ahmed

@ashfaqahmed3

Message

Results-oriented cybersecurity analyst specializing in SOC operations and threat detection.

India

Message

What I'm looking for

I am seeking an L1/L2 SOC role where I can apply SOC operations, incident response, and SIEM/EDR skills, grow into cloud security and automation, and contribute to a proactive, collaborative security team.

I am a results-oriented cybersecurity analyst with hands-on SOC experience in threat detection and incident response. I have worked with enterprise SIEMs and EDR/XDR tools to monitor and analyze security events in real time.

During SOC roles and internships, I developed SIEM content, created correlation rules, dashboards, and reports, and maintained connectors integrating Windows, Linux, and network devices. I investigated incidents, delivered root-cause analysis, and provided actionable remediation recommendations.

I am proficient with Splunk, ArcSight, and CrowdStrike EDR/XDR, and I manage ticketing workflows using ServiceNow and virtual labs with VMware and VirtualBox. I actively explore cloud security, ELK Stack, Sentinel, and Python automation to broaden my impact.

I hold relevant certifications including SOC Expert and CrowdStrike EDR/XDR Administrator, and I seek to leverage my L1/L2 SOC skills to drive security excellence and deliver immediate operational impact.

Experience

Work history, roles, and key accomplishments

SOC Analyst Intern

Worldsec Technologies LLP

Sep 2022 - Jul 2023 (10 months)

Monitored and analyzed real-time security events with ArcSight, Splunk and CrowdStrike, conducted incident investigations with root cause analysis, and developed SIEM content and connectors to improve detection and response.

Splunk ArcSight SIEM Content Development Incident Response

Security Analyst Intern

SIEM Xpert Technologies Pvt Ltd

Apr 2022 - Jul 2022 (3 months)

Monitored security events using ArcSight and Splunk, performed incident triage and escalation, managed tickets in ServiceNow, and configured VMware environments to simulate and troubleshoot incidents.