ABDULAZIZ SYED ALI SHAH
Dammam,Saudi Arabia
Summary
IT professional with 10 years of experience across security operations, IT support, and system administration. Expertise in SIEM and endpoint monitoring, log analysis, and incident investigation using FortiSIEM, FortiSOAR, CrowdStrike, and Splunk. Delivers L1/L2 troubleshooting, secure infrastructure maintenance, and timely incident escalation using structured 5W reporting and ticketing.
Overview
3
3
Languages
1
1
Certification
10
10
years of professional experience
Work History
System Admin & SOC ANALYST
DARB ALWATAN
Dammam, Saudi Arabia
10.2023 - Current
- Monitored and analysed SIEM security events in Splunk FortiSIEM.
- Performed daily security monitoring and triaged alerts, enhancing alert quality and relevance for incident response.
- Investigated security incidents and potential breaches, analysing attacker techniques to inform defensive strategies.
- Configured FortiSOAR playbooks to manage FortiGate log inputs.
- Classified incidents as true positive or false positive outcomes.
- Investigated EDR alerts using CrowdStrike and Wazuh dashboards.
- Reduced unnecessary alert volume through tuning based on accurate analysis.
- Corroborated findings using log evidence to support conclusions.
- Mapped evidence to MITRE ATT&CK and Cyber Kill Chain frameworks.
- Deployed FortiSIEM agents and universal forwarders for centralised log collection.
- Managed FortiClient rollout and defined endpoint user and device policies.
- Administered Google Workspace, controlling user access rights and provisioning accounts.
- Resolved tasks and issues from NCA Haseen, producing detailed reports to document findings and actions taken.
- Prepared clear 5WS incident and breach reports for stakeholders.
SOC Analyst
SURRATI PERFUMES
Makkah, Saudi Arabia
02.2019 - 07.2023
- Analysed security logs in SIEM to investigate alerts and identify potential threats.
- Developed and maintained SIEM dashboards to visualise security events and log activity.
- Monitored CrowdStrike Falcon alerts for endpoint security. monitoring for endpoint alerts, detections, and investigations.
- Investigated IDS/IPS alerts to identify and respond to threats. to detect unauthorised access attempts and analyse attack patterns.
- Correlated endpoint, firewall, and SIEM logs during security incident troubleshooting.
- Monitored FortiGate firewall logs by reviewing traffic and investigating suspicious events.
- Administered Active Directory with domain user account management, password resets, and unlocks.
- Resolved user access and ticket escalations within required timeframes for stability.
- Managed IT support and service desk requests through troubleshooting of hardware, software, network issues.
- Provided L1 to L3 troubleshooting for Windows systems, networks, printers, applications, and users.
- Configured Linux servers with system hardening, user management, and service setup.
IT SUPPORT ENGINEER | M365 & GOOGLE WORKSPACE ADMINISTRATOR
PARASARANA/CRCC (MAKKAH METRO)
Makkah, Saudi Arabia
08.2016 - 01.2019
- Administered Microsoft 365 and Google Workspace environments, managing
- Users, groups, mailboxes, and related security configurations
- Managed license allocation and optimisation within M365 and Google Workspace, supporting compliance with licensing terms
- Workspace to support cost control and compliance with licensing terms
- Implemented and managed Multi-Factor Authentication (MFA), enforcing secure
- Access policies and helping reduce account compromise risks
- Performed email migrations and mailbox management across Microsoft 365 and
- Google Workspace, maintaining data integrity and minimising disruption during
- Provided end-user and systems support in enterprise environments, resolving
- Identity, access, and email-related issues across Microsoft 365 and Google
- Workspace platforms
- Delivered remote support using AnyDesk and TeamViewer, diagnosing issues and resolving incidents for on-site and off-site users
- Resolving incidents efficiently for on-site and off-site users
- Provided connectivity support by troubleshooting and resolving end-user issues promptly.
- Provided technical support for operating systems, applications, and networks, ensuring seamless user experience
- Configured and joined laptops and desktop computers to the corporate domain
- Ensuring adherence to organisational security and compliance policies
- Managed transitions to ensure smooth changes between systems.
Education
POST GRADUATE DIPLOMA - CYBERSECURITY
NED UNIVERSITY OF ENGINEERING AND TECHNOLOGY
ONLINE KARACHI, PAKISTAN01-2026
DIPLOMA - INFORMATION TECHNOLOGY
TRADE TESTING BOARD SINDH
SINDH, PAKISTAN01-2020
BACHELOR OF ARTS - ECONOMICS
SHAH ABDUL LATIF UNIVERSITY
SINDH, PAKISTAN01-2017
Skills
- Active Directory configuration
- Technical Support
- Networking
- MS Office
- Linux
- SIEM
- EDR CrowdStrike
- SPLUNK
- Google workspace
- Microsoft 365 Administrator
- SOC Reporting and Alert Escalation
- Sysmon
- Wazuh
- Malware analysis
- Incident reporting
- Threat intelligence
- Security monitoring
- Log analysis
Languages
English
Urdu
Arabic
Certification
SCE (SAUDI COUNCIL OF ENGINEERING), Earned on 2020-02-01, Validly Licensed and Certified Network Technician by Saudi Council of Engineering Valid until 2029
Accomplishments
- Certificate of Appreciation – Created Software Technology Innovation & Automation.
- Author – “Seven Layers of Cyber Defense”: Authored a cybersecurity book covering practical concepts and layered security defense strategies.
Book: Amazon – Seven Layers of Cyber Defense - TryHackMe – Top 2%: Ranked among the Top 2% of TryHackMe users, demonstrating practical cybersecurity skills through hands-on labs, security challenges, and continuous learning.
Certifications & Professional Training
Professional Certification
- Microsoft Certified: Security Operations Analyst Associate (SC-200)
- Ethical Hacker Wscubetec
- Fortinet Enterprise Firewall Administrator
- Fortinet Network Security Support Engineer
Cybersecurity
- TryHackMe Cyber Security 101
- TryHackMe Pre Security
- Certified Ethical Hacker Udemy
- Certified Master cLasses of Ethical Hacking Udemy
Networking
- CompTIA Network Installation Fundamentals
- HPE Aruba Networking Basics
Microsoft / Cloud / IT
- MS-102: Microsoft 365 Administrator
- Secure Access with Azure Active Directory
- Introduction to Computers
- Technical Diagnostics and Troubleshooting Techniques
- Google Technical Support Fundamentals
- Google Professional Workspace Administrator
Systems Administration
- Windows Server 2022: Install and Configure Active Directory
Professional Membership
- Saudi Council of Engineers — Computer Network Technician
Timeline
System Admin & SOC ANALYST
DARB ALWATAN
10.2023 - Current
SOC Analyst
SURRATI PERFUMES
02.2019 - 07.2023
IT SUPPORT ENGINEER | M365 & GOOGLE WORKSPACE ADMINISTRATOR
PARASARANA/CRCC (MAKKAH METRO)
08.2016 - 01.2019
POST GRADUATE DIPLOMA - CYBERSECURITY
NED UNIVERSITY OF ENGINEERING AND TECHNOLOGY
DIPLOMA - INFORMATION TECHNOLOGY
TRADE TESTING BOARD SINDH
BACHELOR OF ARTS - ECONOMICS
SHAH ABDUL LATIF UNIVERSITY