Open to opportunities

Uthman Hammed

@uthmanhammed

Message

I build SOC detections and investigate threats across Windows, Linux, endpoint, and network telemetry.

Nigeria

Message

What I'm looking for

I'm looking for a cybersecurity role where I can contribute to SOC monitoring, alert triage, incident investigation, threat hunting, and detection engineering while continuing to build hands-on security operations experience.

I've built an enterprise-style SOC homelab that combines Wazuh SIEM, Sysmon, Snort IDS, Microsoft Defender, Nessus, and VirtualBox to simulate real-world security operations.

Through independent detection engineering and threat hunting work, I investigate Windows and Linux telemetry, correlate logs, reconstruct attack timelines, and map attacker behavior to the MITRE ATT&CK framework. I've simulated SSH brute-force activity, PowerShell abuse, persistence, privilege escalation, web attacks, vulnerability assessments, and network reconnaissance.

At Teckube, I supported SOC monitoring, SIEM alert triage, and investigations across endpoint and network security events. I collaborated on validating alerts, documenting findings, vulnerability assessments, and improving security monitoring processes.

I document detection logic, investigation reports, and practical security projects covering Wazuh deployment, endpoint monitoring, Linux threat detection, Snort IDS, and Nessus assessments.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity Detection Engineering & Threat Hunting

Current

Independent Security Research

Mar 2025 - Present (1 year 5 months)

Designed and maintained a multi-VM cybersecurity homelab simulating enterprise SOC environments, and conducted threat hunting and incident investigations using SIEM and endpoint telemetry.

Sysmon Microsoft Defender Nessus Windows 10 Kali Linux Threat Hunting incident investigation Detection Engineering

Cybersecurity Intern

Teckube

Aug 2024 - Feb 2025 (6 months)

Supported SOC activities through continuous monitoring and analysis of security events, assisted in SIEM monitoring and alert triage, and contributed to vulnerability assessments and security documentation.

Security Monitoring SIEM Alert Triage incident investigation Vulnerability Assessment Security Documents