Open to opportunities

Tim User

@timuser8

Message

I’m a cybersecurity analyst specializing in SOC operations, SIEM engineering, and threat detection.

Nigeria

Message

What I'm looking for

I’m looking to lead SOC operations and SIEM engineering—building MITRE-aligned detections, improving alert quality, and accelerating incident response. I want a team where I can run threat hunting, automate workflows, and ship measurable security visibility gains.

I’m a Cybersecurity Analyst with 4+ years of experience across Security Operations, SIEM Engineering, Vulnerability Management, and Security Awareness Programs in cloud and hybrid environments. I design and own SIEM platforms (Splunk Enterprise Security, Microsoft Sentinel, QRadar) and translate telemetry into actionable detections.

I build security visibility that teams can rely on—onboarding and normalizing logs from 20+ enterprise data sources, developing correlation searches and detection rules aligned with MITRE ATT&CK, and tuning SPL to reduce false positives. I also perform alert triage, threat hunting, IOC enrichment, incident validation, severity assessment, and escalation based on SOC playbooks and SLAs.

I strengthen organizational security posture through incident response, root cause analyses, executive reporting, and cross-functional collaboration with US and UK-based clients. I’ve also owned vulnerability scanning and remediation tracking (Tenable, Nessus) and administered security awareness programs (KnowBe4), while creating labs and a Python-based SOC automation toolkit to improve analyst efficiency.

Experience

Work history, roles, and key accomplishments

Current

SOC Engineer / Analyst

Current

mSOC

Dec 2025 - Present (7 months)

Monitored and investigated security alerts across SIEM, EDR, IDS/IPS, firewalls, email security gateways, and cloud environments for multiple enterprise clients. Performed alert triage and threat hunting in Splunk Enterprise Security, enriched IOCs, tuned detections/dashboards, and automated incident creation via Freshdesk and PagerDuty.

SIEM Splunk Enterprise Security EDR IPS Triage Threat Hunting MISP OSINT Correlation Searches Freshdesk PagerDuty Incident Response

Splunk Engineer

JM Misa Inc

Mar 2023 - May 2026 (3 years 2 months)

Designed, deployed, and optimized Splunk Enterprise environments supporting enterprise SOC operations and continuous security monitoring. Owned log onboarding from 20+ sources, built MITRE ATT&CK-aligned detections/dashboards, supported investigations and threat hunting, and automated monitoring workflows using Python and SPL.

SOC Analytics Consultant

AMDARI

Apr 2025 - Dec 2025 (8 months)

Developed SOC analytics solutions using Splunk and network security monitoring technologies, including tuned detections, dashboards, reports, and alerting workflows. Owned vulnerability management with Tenable and Nessus, administered KnowBe4 security awareness programs, and conducted SOC maturity assessments aligned with NIST CSF and CIS Controls.

Splunk SOC Analytics Threat Hunting Vulnerability Assessment Security Investigations Tenable Nessus Vulnerability Management KnowBe4 NIST CSF CIS Dashboards Reporting

Splunk Engineer Intern/Contractor

JM Misa Inc

May 2022 - Mar 2023 (10 months)

Supported enterprise Splunk deployments by developing SPL searches, dashboards, reports, and knowledge objects. Assisted with log onboarding and data validation, investigated security alerts, and supported IOC validation and incident investigations.

Splunk Dashboards Reports Knowledge Objects Onboarding Field Extraction Data Validation IOC Validation