Looking for a job

Tanveer Ahmed

@tanveerahmed10

MSSP SOC Technical Lead at Eventus Security, engineering cross-source detections to identify attack chains.

At Eventus Security, I lead 24/7 MSSP SOC operations across multi-tenant customer environments, guiding L1-L3 analysts and supporting detection, investigation, and response.

I optimize SIEM and SOAR workflows by developing detection use cases, engineering correlation rules, and tuning alerts. I also connect identity, endpoint, network, email, and cloud events to identify attack chains.

I investigate critical incidents involving ransomware, phishing/BEC, malware, and data exfiltration, and conduct proactive threat hunting. I integrate threat intelligence into detection workflows and support security-platform deployments across customer environments.

Previously, at KFSHRC I administered security-monitoring solutions, fine-tuned SIEM detections, and created SOC investigation and escalation procedures. At Paladion Networks, I monitored alerts and logs, investigated suspicious activity, and used McAfee ESM for enterprise log searches.

Experience

Work history, roles, and key accomplishments

Current

Technical Lead

Current

Eventus Security

Aug 2024 - Present (2 years 3 months)

Lead 24/7 MSSP SOC operations across multi-tenant customer environments, guiding L1-L3 analysts and ensuring high-quality detection, investigation and response. Own SIEM/SOAR optimization, including detection use-case development, correlation-rule engineering, tuning, suppression and automation.

SIEM SOAR QRadar Splunk Wazuh Detection Engineering Correlation Rules Incident Response Threat Hunting Threat Intelligence EDR IDS IPS Cloud Security SOC Operations Mentorship

Security Services Specialist

KFSHRC

Jul 2017 - Aug 2024 (7 years 1 month)

Implemented and administered SIEM, antivirus, email security and IPS solutions, supporting enterprise security monitoring and incident response. Built, tested and fine-tuned custom SIEM correlation rules and detection logic; improved alert quality through tuning and operational feedback.

SIEM Antivirus Email Security IPS Correlation Rules Incident Response Vulnerability Management SPF DKIM DMARC SOPs

Security Analyst

Paladion Networks

Nov 2014 - Jul 2017 (2 years 8 months)

Performed daily security-alert and log monitoring, investigated suspicious activity and escalated complex incidents. Monitored and analyzed internal/external threats including malware, targeted attacks and unauthorized access.

ESM Log Management Security Event Correlation Incident Response Vulnerability Management SIEM Reporting