📍 Malaysia
Government
Ministry of Transport — SOC Support & SIEM/XDR
Designed and deployed a comprehensive SIEM & XDR platform with ongoing SOC operations for the Ministry of Transport. Onboarded Windows, Linux, firewall, and network telemetry with MITRE ATT&CK detection mapping.
Key Outcome: Real-time visibility across critical national transit systems and consolidated executive dashboarding.
SIEM/XDR
MITRE ATT&CK
Linux & Windows
Firewall Ingestion
📍 Malaysia
National Security
Visa & Immigration — SIEM, XDR & Continuous SOC
Implemented an end-to-end SIEM & XDR solution with continuous SOC support for a national visa and immigration environment. Rolled out managed endpoint agents and tuned custom detection rules.
Key Outcome: Accelerated containment of endpoint threats and established high-fidelity incident triage procedures.
Endpoint Security
Detection Tuning
Incident Response
📍 United Arab Emirates
Enterprise MSSP
Depth Defense — XDR & SOAR Automated Containment
Delivered an integrated XDR and SOAR deployment, configuring automated endpoint response workflows and threat isolation to drastically reduce Mean Time to Respond (MTTR).
Key Outcome: Automated threat containment playbooks reducing response time from hours to seconds.
SOAR
TheHive
Cortex
Automated Isolation
📍 Pakistan
Tier-1 Telecom
Redtone Telecom — SOC Support & SIEM/XDR
Provided 24/7 SOC operations support and SIEM & XDR deployment for a tier-1 telecom carrier, delivering continuous monitoring, triage, and detection engineering across critical telecom nodes.
Key Outcome: Robust 24/7 monitoring covering core infrastructure against distributed volumetric and targeted attacks.
Telecom SOC
Network Flow
Detection Engineering
📍 Saudi Arabia
Cloud Enterprise
Optiva — SIEM & XDR Telemetry Integration
Delivered a complete SIEM & XDR rollout for Optiva, unifying endpoint, server, and network telemetry with automated alert triage and threat intelligence enrichment.
Key Outcome: Consolidated multi-cloud & on-prem telemetry into a unified single-pane-of-glass monitoring view.
Alert Triage
Threat Intel
Elasticsearch
📍 Malaysia
Higher Education
University of Malaya — SIEM Ingest & Normalization
Built high-throughput log ingestion pipelines to normalize heterogeneous logs into ECS format and authored role-based operational dashboards for continuous security monitoring.
Key Outcome: Scalable ingestion architecture parsing millions of daily events with zero data loss.
Logstash
ECS Normalization
Kibana Dashboards
