Looking for a job

Muhammad Sulieman

@muhammad_suliman

SOC Analyst with over a year of experience in security operations, threat hunting, and incident response. Skilled in analyzing SIEM telemetry.

Pakistan

Message

What I'm looking for

I'm looking for a security operations role where I can investigate threats, hunt for adversary activity, improve detections, and build automation that accelerates incident-response workflows.

At SOCByte, I monitor real-time IBM QRadar telemetry, triage alerts, and escalate confirmed threats for response. I investigate endpoints with Trend Micro Apex One/Vision One, including host isolation and malicious-process termination.

I investigate data-exfiltration alerts in Forcepoint DLP, tune policies to reduce false positives, and conduct hypothesis-driven hunts across endpoint and network logs to uncover missed IoCs.

Previously at Nets-International, I reviewed firewall, Active Directory, and system logs for anomalous behavior. I performed first-line alert triage and applied incident-response playbooks to support containment workflows.

I also built an AI-assisted Agentic SOC Platform using Django, React, LangChain, OpenAI API, Splunk, and QRadar to unify investigations, enrich IoCs, and automate SOAR playbooks.

Experience

Work history, roles, and key accomplishments

Current

Security Operations Center Analyst

Current

SOCByte

Apr 2026 - Present (5 months)

Monitored real-time log sources via IBM QRadar SIEM, triaged and prioritized alerts, and escalated true positives for response. Used Trend Micro Apex One/Vision One for endpoint investigation, host isolation, and malicious process termination.

IBM QRadar Trend Micro Apex One Trend Micro Vision One Forcepoint DLP Threat Hunting Incident Response SIEM EDR DLP

Security Operations Center Analyst

Nets-International

Jul 2025 - Apr 2026 (9 months)

Reviewed firewall, Active Directory, and system logs to identify anomalous user behavior and network traffic. Performed first-line alert triage, filtering false positives before escalating validated threats to senior analysts.

Firewalls Active Directory Log Analysis Alert Triage Incident Response SOPs Playbooks