Muhammad H.
Junior SOC Analyst
Open to offersNew to PlatformAbout
Muhammad H. is a proficient SOC Analyst L1/Cybersecurity Analyst based in Lahore, Pakistan, with solid experience in security monitoring and SIEM operations. Currently interning at Defronix Cyber Security Pvt Ltd, Muhammad is skilled in investigating security alerts, analyzing suspicious activities, and supporting incident response workflows using tools like Wazuh SIEM, Sysmon, and MITRE ATT&CK. His background includes enterprise IT support with emphasis on Active Directory administration, network troubleshooting, and Microsoft 365 management. At KLIX, Muhammad provided Tier 1 and Tier 2 technical support to over 300 enterprise users, maintaining a 95% First Call Resolution rate. Furthermore, he has enhanced corporate security by administering AWS cloud assets and hardening Linux infrastructures at Cyberwing Solutions. His commitment to cybersecurity excellence is demonstrated through hands-on lab projects integrating pfSense Firewall with Wazuh SIEM, effectively coordinating threat detection and analysis within SOC standards. Muhammad holds certifications including Red Hat Certified System Administrator, Cisco Certified Network Associate, and CompTIA Security+. Fluent in several languages, including English and Urdu, he brings a comprehensive and diverse skill set to the cybersecurity domain.
Experience
SOC Analyst L1 (Intern)
Defronix Cyber Security Pvt Ltd · 2026 — PresentMonitored security events and conducted real-time alert triage for both Windows and Linux endpoints utilizing Wazuh SIEM. Analyzed security alerts by reviewing logs, identifying suspicious activities, and following SOC playbooks for incident escalation. Investigated various security incidents, such as phishing attempts and brute-force attacks. Performed log analysis on Windows Event Logs and Sysmon telemetry to assess security events. Conducted initial incident response tasks that included alert validation and evidence gathering. Mapped threats to the MITRE ATT&CK Framework for effective threat classification and created incident reports while maintaining detailed investigation records.IT Support Engineer
KLIX · 2024 — 2026Provided Tier 1 and Tier 2 technical support to over 300 enterprise users, addressing issues related to hardware, software, operating systems, and networks via remote and onsite assistance. Managed Active Directory tasks, focusing on user provisioning and group management, including Organizational Units and Group Policy Objects. Resolved network connectivity problems, dealing with VPN, RDP, LAN/WAN, and wireless networks. Installed and maintained Windows 10/11 systems along with enterprise applications and security updates. Handled IT incidents through ServiceNow ITSM, ensuring compliance with ticket categorization and SLA standards. Offered Microsoft 365 support and performed endpoint maintenance and optimization to prevent business downtime.Technical Associate
Cyberwing Solutions · 2025 — 2025Administered AWS cloud assets, managing EC2, S3, and IAM with a focus on security and permission principles. Strengthened corporate Linux infrastructure through secure SSH configurations and file permissions management. Set up secure virtualized network environments incorporating VLAN segmentation and firewall rules for security testing. Assisted in cybersecurity lab simulations and validation tests to ensure alignment with corporate security strategies.
Skills & Expertise
Education
- General Educational Development (GED) EquivalentGED Testing Service
- Intermediate EquivalentFederal Board of Intermediate and Secondary Education
- MatriculationFederal Board of Intermediate and Secondary Education
Interested in this professional?
Sign in as an employer to save this profile or invite Muhammad H. to a job.
Sign in as an employer