Mohammed Alfayez

During my COOP training, I completed a full rotation across the Information Security (IS) Department, starting with: • GRC (Governance, Risk & Compliance): Reviewed security controls and evaluated how each control is implemented and applied within the organization. • Endpoint Security: Ensured endpoints were secure by verifying agent health, configurations, and compliance with security standards. • Vulnerability Management: Conducted internal vulnerability scans, identified known vulnerabilities, and reported findings to the computing team for remediation. • Security Operations Center (SOC): Assigned to the SOC team to perform advanced monitoring and analysis tasks, including: - Monitoring security events and conducting case analysis and incident investigations. - Identifying phishing, spoofing, and other malicious activities through email header analysis and SPF/DKIM/DMARC validation. - Performing threat hunting using SIEM logs and the MITRE ATT&CK framework to detect IOCs and abnormal behaviors. - Fine-tuning detection use cases to reduce false positives and enhance detection quality and accuracy. - Monitoring EDR logs to detect suspicious device activities and potential compromise indicators.