Mohammad Momani

Experience

• 

  IT Security C&T

  Mar 2019 - Oct 2020

  SOC Analyst

  Roles and Responsibilities• Real time monitoring 24x7, detection, analysis and response for security events.• Incident handling through different security devices and procedures.• Monitor internal infrastructure to detect security events and vulnerabilities.• Open and track tickets until resolution from the customer side.• Create weekly and monthly reports for alerts that signal an incident for many customers.• Perform daily monitoring and analyzing events integrated from using multiple SIEM solutions like (QRadar, RSA).• Providing suggestions to fine tune false positive alerts. • Performing Email analysis and provide a report to customer. Show less

• 

  CyberFort365

  Oct 2020 - Apr 2022

  Cyber Security Analyst - L2

  Roles and Responsibilities• SOC Analyst L2 Representative RSA on customer side (Resident Engineer).• Manage and configure security monitoring tools as needed. • Create daily, weekly and monthly reports for the customer. • Create reports based on the daily need of the customer.• Opening and following up the tickets until resolution from the customer side.• Validate the incidents categorized as false positives by SOC Team.• Triage the identified incidents and ensure that incidents are classified as per the criticality.• Reviewing collected evidence and conduct further investigation to determine if we have damage and detect the impact caused by information security incidents.• Performing Email analysis and provide a report to customer.• Create use cases, Dashboard and rules in the SIEM solutions. • Review tickets that the team is escalating for the customer and provide support and assistance to the team when needed. • Incident handling through different security devices and procedures. • Provide threat and vulnerability analysis as well as security advisory services. • Perform daily monitoring and analyzing events integrated from using SIEM solution Correlate, and analyze log data from network devices, security devices and other key assets using SIEM solution.• Participate in threat hunting activities.• Keeping aware of global and regional security news and sharing relevant news with my team.• Collect IOCs and other threats to check the presence of the IOCs in our customer organizations. Show less

• 

  IT Security C&T

  Apr 2022 - Aug 2023

  Senior Cyber Security Analyst