08/04/2026 updated
partially available
info: Available evenings and weekends
Cyber Security Analyst
Casablanca, Morocco
Worldwide
Master's in Security of Systems and Services (M3S)About me
Cybersecurity Analyst with experience across security operations centers, defending clients. Specialized in EDR, threat hunting, SIEM detection engineering, and DFIR — with a hands-on track record of building detection use cases, automating SOC workflows,
Cloud Computing SecurityComputer SecurityIncident ResponseEthical HackingReverse Engineering Malware CertificationIntrusion Detection and PreventionCyber Security StandardsArcSight SIEM ToolSecurity AdministrationSecurity AnalysisSecurity AwarenessSecurity Information and Event ManagementThreat ModelingCertified Cyber Forensics ProfessionalCyberark
- Administered EDR platforms, performing endpoint investigations, threat hunting, and forensic analysis.
- Executed incident response actions (remote shell, quarantine, process termination, registry changes) to contain threats.
- Developed and optimized EDR detection rules and managed policies (whitelisting, blacklisting, IOC blocking, exclusions).
- Monitored and investigated SIEM alerts, correlating multi-source logs to detect suspicious activity.
- Designed and maintained SIEM detection use cases using IOC-based and behavioral logic.
- Performed DFIR activities, including timeline reconstruction and root cause analysis.
- Conducted CTI tasks: IOC enrichment, threat actor profiling, and threat intelligence integration. Automated workflows between EDR, SIEM, and CTI tools to improve operational efficiency, using Python and Ansible, cutting manual investigation steps significantly.
- Collaborated with IT/security teams on incident response and vulnerability remediation.
- Produced investigation reports, playbooks, and documentation to support SOC operations.
- Triaged and resolved SIEM incidents via Cortex xSOAR, consistently meeting SLA thresholds across 24/7 shift rotations for major European and African clients.
- Prioritized and managed incidents based on severity, ensuring timely resolution and operational efficiency.
- Developed and maintained incident response playbooks and procedures.
- Mentored and coached L1 analysts on triage methodology and escalation procedures, reducing false positive escalations within the team.
- Collaborated with internal and external stakeholders to improve security posture and reduce risk. Operated effectively in high-pressure, 24/7 (Follow the-Sun) environments.
- Supported major European and African clients across aeronautics, telecom, and energy sectors
Experience
Professional experience0 - 5 years
Freelancer since2022
Languages
EnglishFluentFrenchFluent
Project history
Certificates
Computer Hacking Forensic Investigator (CHFI)
EC-Council2024
Splunk Core Certified Power User
Splunk2023