Safi Ullah Khan

Information Security Engineer

Next Generation Technology Solution (NGTSOLs) | 08/2025 – Present

• Resolved 300+ security incidents with minimal business impact
• Monitored real-time security alerts using SIEM tools
• Integrated Azure services and logs with SIEM platforms
• Developed custom SIEM rules and decoders
• Managed EDR/XDR platforms
• Applied MITRE ATT&CK framework for threat hunting
• Deployed and optimized Wazuh SIEM infrastructure

Associate Security Researcher

SlashNext Inc | 01/2024 – 07/2025

• Investigated alerts using Microsoft Sentinel
• Managed detections across Cisco XDR and Defender
• Performed alert triage and escalation
• Analyzed web application vulnerabilities

SIEM: Microsoft Sentinel, Splunk, Wazuh

Cloud Security: Azure Monitor, AWS Security

Endpoint: Microsoft Defender, Cisco XDR, Sophos

Frameworks: MITRE ATT&CK

Tools: Burp Suite, Active Directory, ServiceNow, Jira

BS Computer Systems Engineering

University of Engineering & Technology Peshawar (2020–2024)

CGPA: 3.17

Certifications:

• CompTIA Security+
• Azure Security Engineer Associate (AZ-500)
• Google Cybersecurity
• Burp Suite for Penetration Testing

AI-Powered SOC Alert Triage & Response System

Developed automation-based SOC system to analyze and classify alerts, improving response time and detection accuracy.

Email Security & Threat Hunting

Implemented advanced phishing detection and threat hunting techniques for enterprise email security.

Email: your-email@example.com

LinkedIn: https://linkedin.com/in/yourprofile

GitHub: https://github.com/yourprofile