Open to opportunities

Omar Farooq Malik

@omarfarooqmalik

Message

Cyber Security Engineer specializing in detection engineering, SecOps automation, and cloud security.

Pakistan

Message

What I'm looking for

I’m looking for a Cyber Security role where I can build scalable detections and automate SecOps workflows—owning cloud and endpoint protection, incident response, and continuous hardening with measurable threat-visibility improvements.

I architect and deliver cloud and security operations programs focused on threat detection, hardening, and fast incident remediation. At Careem, I implemented AWS security controls (GuardDuty, Lacework, CloudWatch), built custom detections for VPC Flow Logs and ELB access logs, and managed CrowdStrike Falcon across endpoint and Kubernetes workloads.

I also scale SecOps capabilities by integrating a global Google SecOps ecosystem with custom UDM parsers, YARA-L detection logic, and automated SOAR playbooks. I’ve driven security operations outcomes like WAF/DDoS protection with custom rules and rate limiting, coordinated incident response with evidence and root-cause analysis, and improved triage efficiency using automation with Python/Bash, n8n, and LLM-powered intelligence.

Experience

Work history, roles, and key accomplishments

Current

Cyber Security Engineer

Current

Careem

Apr 2024 - Present (2 years 2 months)

Architected AWS security controls and built detection rules for VPC Flow Logs and ELB access logs to identify anomalous network behavior. Managed CrowdStrike and Google SecOps (Chronicle) with YARA-L detections and automated SOAR playbooks, integrated Cloudflare/AWS WAF and DDoS protection, and coordinated incident response and remediation.

AWS Security GuardDuty Lacework Google SecOps Chronicle YARA Cloudflare WAF Incident Response

Security Engineer

Nayapay

Dec 2021 - Apr 2024 (2 years 4 months)

Designed and deployed a global Wazuh SIEM with custom parsers and detection logic, reducing false positives by 40% while maintaining log integrity and availability. Led defensive validation, vulnerability management with Nessus and CIS Benchmarking to achieve ISO 27001 and PCI-DSS compliance, improved secure SDLC, and reduced phishing click-rate by 60% via targeted KnowBe4 simulations.

Wazuh Detection Engineering Nessus ISO 27001 PCI DSS KnowBe4

SecOps Intern

Nayapay

Jul 2021 - Dec 2021 (5 months)

Created custom scripts to scan production environments for abnormal behavior and supported deployment of security solutions. Reproduced vulnerabilities reported on BugCrowd and assisted with patching newly identified security issues.

Vulnerability Reproduction Patch Management Bugcrowd Security Solutions Deployment