Mohammed Alzahrani

• Designed and developed a new Advanced Threat Hunting service, establishing custom workflows and detection techniques tailored to enterprise environments. • Developed a YARA rules parser and converter, automating rule validation and improving operational efficiency in malware identification. • Built a VirusTotal automation tool to enrich suspicious indicators with intelligence via API queries, reducing manual workload. • Deployed and maintained an internal MISP threat intelligence platform, integrating it with detection pipelines and improving threat visibility across the SOC. • Lead real-time detection and response for advanced cyber threats using SIEM tools (e.g., Elastic, Splunk). • Perform threat hunting across log sources, identifying anomalies using custom queries. • Document and report incidents with detailed technical and executive summaries. • Mentor junior analysts and standardize procedures for threat detection and response.