Mazen Ahmed

I’m a SOC Analyst with hands-on SIEM investigation experience using Splunk and Elastic, specializing in phishing triage and malware behavior analysis. I’m SOC Level 1 certified through TryHackMe and follow the LetsDefend SOC Analyst Learning Path and Malware Analysis paths to keep improving my detection and investigation approach.

In my Cybersecurity Intern role, I designed and structured cybersecurity training program course outlines, researched frameworks and industry best practices (OWASP, SANS), and coordinated with instructors to deliver specialized training. This strengthened my communication, project management, and technical documentation habits—useful when working incident workflows and reporting outcomes.

My labs and simulations are built for real investigation practice: I created a secure, isolated virtual machine to test malware safely (SafeLab), performed static analysis to find IOCs without executing samples, and ran dynamic analysis to observe how malware alters systems and attempts internet connections. I also investigated infected Microsoft Office documents to understand how they hide malicious code.

For security operations and hands-on validation, I monitored security alerts, investigated SIEM logs in Splunk/Elastic, and triaged suspicious activity during SOC simulations (TryHackMe & LetsDefend). I’m also comfortable with vulnerability testing fundamentals—identifying web vulnerabilities based on OWASP Top 10 and performing BurpSuite-based scanning with professional remediation reporting—so I can support broader security investigations in a fast-paced SOC environment.