Farah Zeidan
About Candidate
Cybersecurity Analyst with 3+ years of experience across SOC operations, governance, risk, and compliance in regulated environments. Hands-on experience with SIEM monitoring, incident triage, vulnerability management, and security hardening, aligned with frameworks such as NCA ECC, CCC-CST, CIS v8, and ISO/IEC 27001.
Strong background in cloud and hybrid environments, supporting security controls for on-prem and cloud platforms, with exposure to WAF configuration, IAM, and endpoint security. Experienced in translating technical risks into clear, actionable recommendations for stakeholders.
Currently expanding cloud security expertise with hands-on labs in Google Cloud and preparing for AWS Cloud Practitioner. Detail-oriented, proactive, and driven by continuous improvement in cybersecurity maturity.
Location
Education
A comprehensive engineering degree focused on Computer and Communication Engineering, specializing in networks and systems.
Work & Experience
Support multiple companies, troubleshoot problems, suggest and apply convenient solutions, Windows server administration (backup, active directory, SQL), network administration and monitoring, firewall (Fortinet) management, hardware and software repair (format, hardware).
GRC, Risk Management & IT Audit Conduct compliance audits and maturity assessments (ISO27001:2022, CRF, NCA). Develop and maintain key policies and procedures (risk management, incident management, BCP). Build and manage the ERM framework: risk identification, appetite, and risk registers. Perform risk assessments for IT assets and technical projects. Evaluate information security controls and deliver risk-based recommendations. Security Operations (MSSP) Manage SIEM platforms (LogRhythm, RSA, ArcSight, Trellix, Wazuh): onboarding, use cases, dashboards. Develop correlation rules and perform advanced monitoring. Execute proactive threat hunting and incident triage. Manage security solutions: Forcepoint, Fortinet, Palo Alto, Trend Micro, Trellix, MalwareBytes. Training & Awareness Deliver cybersecurity training for users and IT teams. Run phishing awareness campaigns using GoPhish. Provide specialized workshops for incident response teams. Digital Forensics Perform evidence collection, dynamic malware analysis, and incident timeline reconstruction
