Nasib Hafeez

• Authored and maintained internal SOC documentation and playbooks to standardize investigative procedures and ensure team-wide knowledge consistency. • Trained and mentored new analysts, facilitating on-boarding, skill development, and continuous improvement through hands-on coaching and mock incident simulations. • Oversaw ticket triage and escalations, ensuring timely and accurate resolution of alerts and incidents in alignment with organizational SLAs. • Managed long-term security projects, including tool optimization, process improvement initiatives, and custom dashboard development for threat visibility and SOC performance tracking. • Created and maintained operational dashboards (e.g., in Splunk) to monitor threat trends, and analyst output. • Delivered weekly operational reports and strategic deliverables to leadership, summarizing threat landscape insights, team metrics, and escalation trends. • Submitted detailed after-action reports (AARs) following critical incidents to document response timelines, root cause analysis, containment measures, and lessons learned.

Monitored network traffic, logs, and events for any potentially malicious activity. • Excelled in adapting and earned notable recognition for content development contributions. • Worked with Splunk Enterprise Security data logs and dashboard development. • Practiced use of Enterprise Endpoint Security concepts and industry standard software. • Demonstrated leadership abilities having mentored and trained new analysts. • Security and day-to-day operations of the SOC with a focus on proactive monitoring, Incident Response and content creation • Tier escalation of major events and cyber investigations • Identifed, evaluated, recommended, and implemented processes, procedures and tools which enhanced existing monitoring capabilities and ensured a cycle of continuous improvement. • Developed and maintained policies, processes, and procedures to ensure reliable and 2 effective SOC operations. • Managed, coached and mentored SOC staff to ensure employees are working as efficiently as possible while fostering a team-oriented environment. • Coordinate with appropriate engineering, security, and management teams to resolve and report on issues identified via SOC monitoring tools. • Lead efforts to constantly monitor, detect, and evaluate events which impacted monitored assets, increased situational awareness of network operations or network security events that threatened the operations of the networks or systems. • Monitored and reviewed event indications, warnings, and system logs and notified the applicable stakeholders in accordance with service level agreements and SOPs. • Participated in special projects as required • Extensive experience with digital media analysis and digital forensics (Splunk, Tanium, McaFee Epo)

• Responsible for monitoring entire network • Leveraged SolarWinds to keep track of VMWare clusters • Utilized Altiris to build helpdesk tickets and monitor customer issues • Handled customer support for I.T. issues ranging from laptop updates to phone line support • Kept clients updated on work progress and estimated time to completion • Documented and recorded client issues from initialization to completion • Developed documentation and set-up guides for all tools deployed in network operations center • Compiled client-side documentation on how to set up personal VPN's • Operated MacAfee encryption software to update, secure, and encrypt user laptops • Utilized Symantec Endpoint Manager to run virus scans and security checks • Deployed Retina Scanner to monitor security alerts and vulnerabilities of network • Used Oracle Enterprise Manager to run analysis's on VM clusters and servers • Wrote reports and executive level summaries of breakdowns and tools mentioned above to distribute throughout agencies.

• Diagnosed and repaired computers brought in by clients for various issues. • Hands-on knowledge of installing, configuring, and troubleshooting Windows and Mac desktops, laptops and printers. • Comprehended customer's needs and assessed various technologies available to provide a solution. • Conducted ad-hoc research on system issues as needed. • Briefed clients on how to operate products across all devices in stock • Educated upon and was able to deploy every product BestBuy had to offer and how those products could be fixed if broken and then interfaced together. • Responsible for coaching and educating sales associates on IT products throughout each department

• Created tickets for clients computer issues. • Processed, coordinated, troubleshoot, resolved and provided technical assistance in support of Help Desk tickets and Change requests to solve end user issues. • Maintained customer support service areas and provided customer assistance with portable endpoint systems. • Worked with clients to ensure all issues were addressed. • Deployed or Cycled down network systems for interchangeable clients as needed • Ensured all systems were secure. • Monitored systems for threats and handling flags appropriately.

• Learned procedures for Mine safety and health administration • Assisted in website modernization via reviewing, and compiling content to be published by the business program area • Worked with management and assisted with managing logistics for internal executive meetings as well as external stakeholder meetings to support MSHA’s mission • Assisted with data support and compilation for senior management for key initiative and mandates of MSHA

• Configured and readjusted TCP/IP local area network connectivity, DHCP, DNS, network devices, host firewalls and network drive. • Organized acquisition requests for new network materials such as switches, routers, hubs, and racks. • Balanced and helped moderate client tickets across interfaces. • In charge of reorganizing and setting up new network system and storage room. • Maintenance of computer desktop environments by analyzing requirements, settling problems, installing hardware and software solutions, and supporting internal company environment.

Specialization in Digital Forensics