Hamza Ghani

Cybersecurity Analyst – SOC & GRC

Confidential • Freiberufler

Jun 2024 - Sep 2026 • 2 yrs 3 mos

• Performed security log monitoring and analysis using SIEM tools including Wazuh to identify suspicious activities, anomalies, and potential threats in simulated environments. • Conducted incident triage by analyzing alerts, classifying events, distinguishing false positives from true positives, and documenting escalation procedures. • Executed vulnerability assessments using Nessus and OpenVAS, identifying system weaknesses and recommending prioritized remediation actions. • Practiced ISO 27001-based risk assessment including asset identification, threat and vulnerability mapping, and maintenance of structured risk registers. • Developed risk treatment plans applying mitigation strategies aligned with ISO 27001 Annex A controls. • Assisted in drafting and reviewing information security policies, procedures, and documentation to support compliance and audit readiness. • Simulated internal audit activities including control validation and gap analysis against ISO 27001 requirements. • Gained hands-on understanding of security monitoring workflows, incident response lifecycle, and cybersecurity compliance frameworks.