Open to opportunities

Shafeek Assanar

@shafeekassanar

Cyber Security Analyst and SOC Analyst focused on SIEM-driven detection, incident response, and secure cloud operations.

Canada

Message

What I'm looking for

I’m looking for a security role where I can drive SOC investigations with SIEM automation, strengthen Azure security and IAM/Zero Trust, and help teams stay compliant (ISO 27001, GDPR) while improving incident response outcomes.

I’m a Cyber Security Analyst with 10 years of IT experience and 5+ years in security operations, incident response, and secure coding. I align security strategies with NIST, ISO 27001, SOC 2, PCI DSS, and GDPR to strengthen protection across on-premises and cloud environments.

In my current role, I monitor and manage security incidents using Microsoft Sentinel, fine-tuning SIEM rules to reduce false positives and improve detection efficiency. I integrate and manage SIEM platforms like Microsoft Sentinel, Defender XDR, and Purview Audit to support real-time threat detection, log analysis, and incident monitoring.

I also bring hands-on expertise in vulnerability assessment, ethical hacking, and penetration testing—using tools like Nessus, Qualys, Nmap, Metasploit, and Hashcat to identify and mitigate risks in both on-premise and cloud applications. I regularly review OWASP Top 10 vulnerabilities and work with teams to maintain secure coding practices.

I’m strong in Identity and Access Management and Zero Trust models using Azure AD and Okta, and I’ve supported cloud security implementations in Azure (including Microsoft Defender for Cloud). I automate repetitive workflows with Python and PowerShell to streamline alert triage, while producing clear risk analysis reports and supporting compliance activities like ISO 27001 audit documentation.

Experience

Work history, roles, and key accomplishments

Current

Information Security Analyst

Current

TD Bank

Jan 2024 - Present (2 years 6 months)

Monitor and manage security incidents using Microsoft Sentinel and related Microsoft security tooling, tuning detection rules to reduce false positives and improve threat detection. Conduct risk assessments and vulnerability scans, support cloud security hardening in Defender for Cloud, and automate parts of alert triage with Python and PowerShell.

Defender XDR SIEM Incident Response Threat Detection Risk Assessment NIST GDPR ISO 27001 Vulnerability Scanning Nessus Qualys Microsoft Defender IAM Active Directory MFA Access Reviews Python PowerShell MTTR

Cyber Security Analyst

Value Mentor Infotech Pvt Ltd

Dec 2021 - Dec 2023 (2 years)

Analyze network traffic and incidents using SIEM and packet analysis tools, and support real-time threat detection and response. Secure network and endpoint environments, perform vulnerability assessments and ISO 27001-aligned security audits, and contribute to incident management and remediation coordination.

Splunk Azure Sentinel Wireshark Network Security Firewalls Vulnerability Scanning Nessus Qualys ServiceNow Incident Management Security Audits ISO 27001 Threat Analysis Azure Incident Response Penetration Testing

SOC Network Engineer

Salam Technology

Jun 2019 - Jun 2021 (2 years)

Support SOC monitoring by identifying potential threats in Splunk logs, escalating significant alerts, and assisting with triage, investigation, and containment. Perform vulnerability scanning, help maintain network equipment under supervision, and assist with security policy and user permission management across Active Directory and Azure AD.

Splunk SOC Firewalls Routers Vulnerability Scanning Nessus Active Directory Azure AD Security Policies Investigation Root Cause Analysis

IT Support Engineer

Wipro InfoTech

Nov 2014 - Dec 2018 (4 years 1 month)

Provide L1-L3 support and administer Windows and Linux environments with Active Directory, Group Policy, Intune, and Office 365. Support network services and Azure infrastructure components, and use ServiceNow/Jira for ticket-based issue resolution within SLAs.