About
Security professional with hands-on expertise in endpoint threat detection, incident investigation, and enterprise security operations across Windows, Linux, and cloud platforms. Excelled in EDR deployments, identifying gaps, and advising stakeholders to minimize risk. Translate technical findings into actionable business recommendations and craft procedures that strengthen security posture. Leverage strong analytical skills and SIEM/log analysis in MDR environments to drive proactive defense.
Skills & Expertise (35)
Work Experience
Cyber Security Analyst - Incident Response & Endpoint Security Intern
Cyber Security Nxxt
Sep 2022 - Jan 2023
Analyzed 50+ security logs and supported 5+ incident response cases involving endpoint and network anomalies; achieved 30% reduction in incident resolution time through streamlined forensic analysis. Conducted 25+ vulnerability scans across virtual Windows and Linux systems; identified, prioritized, and translated security risks into actionable remediation steps. Designed and implemented secure cloud architectures in Azure and AWS; applied encryption, IAM policies, network segmentation, and endpoint hardening for resilient environments. Gained hands-on experience with SIEM and SEM tools (Splunk, similar platforms) for security event monitoring, anomaly detection, and log analysis; became proficient in log parsing and data correlation. Deployed 10+ security controls on systems and endpoints in collaboration with senior analysts; documented procedures for configuration, tuning, and validation to improve compliance and reduce attack surfaces. Applied OSI model knowledge and network protocol understanding to diagnose endpoint and network security issues; supported troubleshooting of connectivity and access control problems. Completed 30+ hours of structured cybersecurity training in incident response, forensic analysis, and security best practices; contributed to internal runbooks and knowledge base development.
Cybersecurity & Cloud Associate
CommandHQ
Jun 2024 - Sep 2025
Monitored security events and anomalies across Windows, Linux, and cloud‑based endpoints, tuning alerts to reduce false positives while maintaining strong detection coverage. Configured and managed endpoint security controls on servers and workstations, testing configurations against malware, lateral movement, and abuse of privileges. Secured AWS environments (S3, EC2, IAM) with encryption, role based access control, and network segmentation, and applied hardening baselines to Linux and Windows systems. Investigated security incidents involving endpoint and application anomalies, documented timelines and impact, and coordinated remediation with internal IT and engineering teams. Performed regular security health checks on systems and endpoints to identify misconfigurations, incomplete coverage, and outdated components, and recommended technical fixes. Conducted security assessments on internal applications and workflows, mapping technical controls to business risks and recommending additional safeguards where needed. Drafted and maintained internal security guidelines and procedures, helping standardize how endpoints and cloud resources are configured and monitored. Worked as a bridge between technical, product, and delivery teams, clearly communicating security issues, risks, and recommended actions in language appropriate for each audience. Tested and evaluated AI‑driven and security‑related platforms for reliability, anomalous behavior, and safe usage within the organization.
Education
Bachelor Of Science Majors : Information Technology - Psg College Of Arts And Science
- · Afghanistan
Senior Secondary - National Model Senior Secondary School
- · Afghanistan
Higher Secondary - Air Force School
- · Afghanistan
Interested in this developer?
Profile Score Breakdown
Profile Overview
Availability Details
Visa Status
Citizen
Relocation
Open to Relocation
