Open to opportunities

Omar Mrabet

@omarmrabet

Message

Senior Cyber Security professional specialising in proactive threat detection and response.

United Kingdom

Message

What I'm looking for

I seek a senior security role focused on proactive detection, SIEM/SOAR development, threat hunting, and mentoring within a collaborative, improvement-focused team.

I am a Senior Cyber Security professional with over 8 years' experience in Security Operations, Threat Detection, SIEM Engineering, and Vulnerability Management across enterprise and MSSP environments.

I have implemented and managed solutions including Microsoft Sentinel, Splunk, QRadar, CrowdStrike, Darktrace and the Microsoft Defender suite, and I lead threat intelligence, hunting and proactive detection programmes that reduce incident impact.

My background includes building SIEM content and SOAR playbooks, owning vulnerability management with Qualys Guard, and performing malware analysis and forensics to drive rapid containment and remediation.

I am committed to maturing SOC capabilities through automation, mentoring, KPI-driven reviews and aligning detection with business risk to deliver measurable value and long-term customer trust.

Experience

Work history, roles, and key accomplishments

Current

Senior SOC Analyst

Current

ITC Secure

Jul 2022 - Present (3 years 3 months)

Provide advanced security monitoring, incident investigation, and SIEM/SOAR engineering for blue-chip and mid-market customers, leading weekly threat intelligence reports and developing detection playbooks that improved proactive threat identification and reduced MTTR.

Microsoft Defender SOAR Threat Hunting Vulnerability Management SIEM Tuning Incident Response

Senior SOC Analyst

BT Enterprise

Apr 2020 - Jun 2022 (2 years 2 months)

Delivered continuous monitoring and incident response across enterprise environments using Splunk, QRadar and CrowdStrike, created dashboards and correlation rules to improve visibility and contributed to SOC maturity and SIEM deployment projects.

Splunk QRadar Crowdstrike SIEM Dashboarding SOC Playbook Development

2nd Line Cyber Security Analyst

PlusNet Plc

Sep 2017 - Apr 2020 (2 years 7 months)

Owned Qualys vulnerability management and performed SIEM development and incident response, creating custom rules and dashboards to drive remediation and reduce exposure across the enterprise.

Qualys Splunk Vulnerability Management Forensics Incident Response SIEM Rule Development Patch Management

Junior Cyber Security Analyst

PlusNet Plc

Sep 2016 - Aug 2017 (11 months)

Supported SIEM operations and alert triage using Splunk, developed and fine-tuned correlation rules, and assisted incident response workflows to improve SOC detection capabilities.

Splunk SIEM Tuning Triage Incident Response Log Analysis Security Monitoring

Technical Support Advisor

PlusNet Plc

Nov 2011 - Sep 2016 (4 years 10 months)

Provided technical support and fault resolution for customers, developing troubleshooting skills and contributing to service reliability prior to transition into cybersecurity roles.

Technical Support Customer Service Ticketing Systems