noman arif

With HomeSIEM, I built a lightweight SIEM for home and small networks that collects logs and network traffic, detects suspicious activity, and presents alerts in a live dashboard. I wrote configurable YAML detection rules for events including port scans, ARP spoofing, and repeated failed SSH logins.

I designed an alert triage workflow with severity levels, cooldowns, acknowledgements, and notifications. The platform also supports timed device blocking and speed limiting through nftables, with safeguards such as protected devices and an emergency release command.

For FootprintX, I developed a threat intelligence platform using OSINT techniques and implemented an HBPS-based system to assess and prioritize potential cyber threats. I'm studying Cyber Security at Superior University and am seeking a SOC Analyst internship or entry-level role to grow in security monitoring, alert triage, and incident response.