Looking for a job

Saifullah User

@saifullahuser

Message

I build security tools and detect threats across cloud and application environments.

Pakistan

Message

What I'm looking for

I'm looking to apply hands-on security practices to real-world challenges while continuing to learn across threat detection, incident investigation, penetration testing, and secure application development.

At Systems Limited, I deployed an end-to-end Microsoft Sentinel SIEM on Azure, connecting AMA, Windows Security Events, TAXII, and Pulsedive for centralized log ingestion.

I developed KQL analytics rules mapped to MITRE ATT&CK for brute-force and audit-log-clearing detection, reducing false positives by 30% through entity correlation. I also integrated Microsoft Defender Threat Intelligence, hunted threats, and investigated incidents across ingested data sources.

I build practical security products, including CitizenWatch, PentestAI, and VulnModeler. My work spans full-stack development, AI-assisted penetration testing workflows, Python AST-based SAST scanning, threat modeling, and security mappings across OWASP Top 10, NIST CSF, CWE, STRIDE, and MITRE ATT&CK.

Experience

Work history, roles, and key accomplishments

SOC Analyst Intern

Systems Limited

Jul 2025 - Aug 2025 (1 month)

Deployed end-to-end Microsoft Sentinel SIEM on Azure, configuring resource groups, Log Analytics workspaces, and data connectors for centralized log ingestion. Developed KQL analytics rules mapped to MITRE ATT&CK for brute-force and audit log clearing detection, reducing false positives by 30% via entity correlation.

Azure Threat Hunting incident investigation