Open to opportunities

Hamza Shoukat

@hamzashoukat

Message

Cyber Security Expert and MCT specializing in DFIR, Azure security investigations, and Security Operations.

Qatar

Message

What I'm looking for

I’m looking to drive hands-on DFIR and Security Operations work—especially Azure security investigations and threat hunting—while delivering training that turns complex findings into clear, actionable next steps for teams.

I’m a highly accomplished Cyber Security Expert and Microsoft Certified Trainer (MCT) with 6 years of experience in Digital Forensics and Incident Response (DFIR). I specialize in cloud and on-prem security investigations, advanced threat analysis, and strategic cybersecurity consulting, with a strong focus on Security Operations and Azure Security. I’m based in Qatar and bring a practical, instructor-led approach to helping teams understand what to do—and how to do it.

In Microsoft CIRT work, I conducted hundreds of security investigations for Premier & Unified Support customers across Windows, Active Directory, Azure, Ransomware, and Microsoft 365. I developed KQL (Kusto) dashboards for the global CIRT team to enable quick detection of suspicious activity, and I mentored junior engineers through shadowing on customer calls with continuous professional feedback. I also trained customers and account teams on security best practices and Microsoft security tools such as MDE, MDO, Microsoft Purview, Sentinel, and Defender for Microsoft Azure.

Beyond incident response, I’ve delivered high-impact training and workshops, translating complex cybersecurity concepts into digestible, hands-on lessons that students consistently rate 5 stars. My background also includes Security Threat Risk Assessment (STRA) and incident response planning aligned with NIST SP 800-61, as well as hands-on work across penetration testing, vulnerability assessment, and threat hunting. I bring a “student mindset” to every engagement—curious, structured, and committed to continuous learning.

Experience

Work history, roles, and key accomplishments

Current

Lead Cyber Security Trainer

Current

MENA Executive Training

Jan 2025 - Present (1 year 6 months)

Delivered live Q&A and 1:1 sessions, translating complex cybersecurity topics into hands-on lessons rated 5 stars by 98% of students. Led live lessons and workshops and supported learners through feedback on student projects used in the official curriculum.

Cybersecurity Training Q&A 1:1 Tutoring Incident Response Azure Security Security Operations Curriculum Development Threat Analysis Student Assessment

Senior Consultant - Cyber Defense

KPMG

Nov 2021 - Jan 2022 (2 months)

Delivered a Security Threat Risk Assessment (STRA) for iOS applications and developed an Incident Response Plan aligned with NIST SP 800-61. Produced client-facing findings and remediation roadmaps and performed network penetration testing including DDoS stress testing and fuzzing.

Incident Response Penetration Testing DDoS Testing Vulnerability Assessment

Security Engineer II

Arctic Wolf

Mar 2021 - Oct 2021 (7 months)

Served as an SME for cyber threat hunting and led documentation on threat intelligence and hunt methodology. Acted as a lead on client-facing security reviews and worked on vulnerability assessment, scanning, remediation, and sensor troubleshooting.

Cloud Forensics Threat Hunting Threat Intelligence Vulnerability Assessment CSPM Scanning remediation Sensor Troubleshooting Security Reviews

Triage Security Engineer I

Arctic Wolf

Feb 2021 - Mar 2021 (1 month)

Triage and handled non-binary security incidents using network, endpoint, and log sources, performing advanced troubleshooting of physical and cloud sensors and vulnerability scanners. Pivoted through SIEM fields to develop a holistic view of risks and completed incidents in collaboration with forensic engineers.

Triage SIEM Sensor Troubleshooting Vulnerability Management Forensics Collaboration Risk Assessment

Security Analyst

Arctic Wolf

Sep 2020 - Jan 2021 (4 months)

Provided 24/7 monitoring and immediate response for critical security incidents as part of the global iSOC team. Conducted internal and external security audits, analyzed logs, and supported ad hoc log searches while coaching newly hired personnel.

ISOC Monitoring Incident Response Log Analysis Security Audits Ad Hoc Log Searches Coaching & Mentoring

Network Systems Analyst

Waterloo Regional Health Network

Sep 2019 - Aug 2020 (11 months)

Proposed and implemented automated zero-touch OS deployment for Windows/Mac/Linux and delivered changes that reduced turnaround time by 85%. Managed and maintained core systems and performed troubleshooting and remediation for alerts raised by endpoint security programs.

Endpoint Security Active Directory Group Policy RADIUS

IT Support Specialist II

Poise Under Pressure

May 2019 - Aug 2019 (3 months)

Provided level 2 IT support for client hardware, software, and application issues. Administered enterprise email (accounts, shared mailboxes, distribution lists), analyzed event logs, mentored junior technicians, and maintained technical documentation.

Level 2 Support Shared Mailboxes Distribution Lists Troubleshooting Technical Documentation Mentoring

Security Incident Response Engineer

Microsoft

Jan 2022 - Present (4 years 6 months)

Conducted security investigations for Premier and Unified Support customers across Windows, Active Directory, Azure, ransomware, and Microsoft 365. Developed KQL dashboards for threat detection, collaborated with partner teams, and mentored junior engineers.

Digital Forensics Security Investigations Active Directory Azure Security Microsoft 365 Security Microsoft Purview Threat Hunting Customer Support Mentoring

Education

Degrees, certifications, and relevant coursework

Conestoga College

Bachelor of Applied Health Information Science (Honours), Health Information Science

Grade: Overall GPA: 3.8/4.0; Graduation with Distinction; Dean's List: 6 semesters

Completed a Bachelor of Applied Health Information Science (Honours) with an overall GPA of 3.8/4.0, graduating with distinction and making the Dean's List for 6 semesters.