Mohamed Hassan Aboelnaga

SOC Admin

MA

Mohamed Hassan Aboelnaga

SOC Admin

Skilled SOC Engineer with hands-on experience in deploying and managing SIEM platforms including FortiSIEM, QRadar, Splunk, and ELK Stack. Proficient in developing custom use cases, dashboards, and automated incident response workflows using FortiSOAR. Strong background in log integration, threat detection, and optimizing security operations across enterprise environments.

Projects

JSA Project

Implemented all-in-one JSA instance, upgraded to version 7.5.0 FP7, allocated licenses, resolved application and update issues, and developed use cases and dash

Implemented all-in-one JSA instance, upgraded to version 7.5.0 FP7, allocated licenses, resolved application and update issues, and developed use cases and dashboards.

JSA

FortiSIEM Project

Deployed supervisor, worker, and collector components; configured Click House; integrated log sources via API, agents, and syslog; developed templates, parsers,

Deployed supervisor, worker, and collector components; configured Click House; integrated log sources via API, agents, and syslog; developed templates, parsers, rules, dashboards, and reports; and conducted issue resolution.

FortiSIEMClick HouseAPIsyslog

ELK Stack Project

Installed and configured Elasticsearch nodes, Kibana, Fleet Server, and agents; managed index lifecycle, users, roles, spaces, and detection rules; performed tr

Installed and configured Elasticsearch nodes, Kibana, Fleet Server, and agents; managed index lifecycle, users, roles, spaces, and detection rules; performed troubleshooting via CLI, GUI, and API.

ElasticsearchKibanaFleet ServerCLIGUIAPI

PoC ELK

Deployed ElasticSearch and Kibana on Debian, configured Filebeat and Fleet Server, and collected logs from Juniper, Cisco, and FortiGate devices.

Deployed ElasticSearch and Kibana on Debian, configured Filebeat and Fleet Server, and collected logs from Juniper, Cisco, and FortiGate devices.

ElasticsearchKibanaDebianFilebeatFleet Server

F3SU : Full Secure System for Smart University (Graduation Project)

Implemented IPSec VPN, server infrastructure (NTP, TFTP and Web), VLANs, DHCP, IP phones, and redundancy solutions.

Implemented IPSec VPN, server infrastructure (NTP, TFTP and Web), VLANs, DHCP, IP phones, and redundancy solutions.

IPSec VPNNTPTFTPVLANsDHCPIP phones

Experience

SOC Admin

BARQ Systems : SOC Admin - IScore (Contract)

مايو 2025 — حتى الآن · 1 سنة 3 أشهر
دوام كاملهجين
  • Hands-on experience with Splunk SIEM, including log source onboarding, Universal Forwarder configuration, SPL development, dashboards, Monitoring Console health checks, and daily troubleshooting.
  • Supporting daily Splunk operations, including troubleshooting ingestion issues, license usage, indexing performance, and search latency.
  • Solid experience with ELK Stack (Elasticsearch, Kibana), including ingest pipelines, creating detection rules using (KQL, ES|QL, EQL), log parsing, dashboards, and troubleshooting ingestion and performance issues.
  • Experience migrating SIEM use cases between ELK and Splunk, translating detection logic, validating alerts, and ensuring detection consistency.
  • Working knowledge of Cortex XSOAR, including playbook execution, basic automation, integrations, and incident response support.

SIEM Implementation Engineer

BARQ Systems

أكتوبر 2024 — مايو 2025 · 8 أشهر
دوام كاملهجين
  • Implemented and maintained FortiSIEM, QRadar/JSA, including custom use cases, parsers, dashboards, and performance tuning.
  • Deployed and supported the ELK Stack (Elasticsearch, Kibana, Fleet Agents) for centralized log management and threat detection.
  • Built and maintained FortiSOAR playbooks for incident response automation and integrated multiple security tools.
  • Delivered end-to-end platform support, including troubleshooting, upgrades, and performance optimization.

Cyber Security Operations Engineer

Vodafone (Contract)

سبتمبر 2023 — أكتوبر 2024 · 1 سنة 2 أشهر
دوام كاملهجين
  • Conducted 24/7 monitoring and triage of security alerts, escalating critical incidents and supporting real-time threat response.
  • Utilized Arbor Anti-DDoS for traffic analysis and threat mitigation.
  • Investigated email security incidents via Microsoft Defender XDR.
  • Produced comprehensive daily, weekly, and monthly reports for security posture evaluation and stakeholder communication.

Skills

FortiSIEMQRadarSplunkELK StackFortiSOARSPL developmentKQLES|QLEQLLinuxvSphereESXIWindowsActive DirectoryIP networksLANWANNG FirewallsASAVPNFirewallsIPSIDSProxyWAFArbor Anti-DDoSMicrosoft Defender XDRJNCIAJNCIS-SECFortiGatePalo AltoSRX firewallsAruba Mobility MasterControllerClearPassF5 LTMASMPythonProject ManagementFreelancingMicrosoft ProjectBusiness EnglishArabic (native)English (professional proficiency)

Education

Bachelor’s Degree in Computer Science

Suez Canal University

التاريخ - يناير 2022
أخرى
  • Grade: Very Good. Graduation Project: F3SU. Grade: Excellent.

التواصل

دعنا نتواصل. اختر أسرع طريقة للوصول إليّ.
البريد الإلكتروني

mo.7assan263@gmail.com

أسرع رد عبر البريد الإلكتروني.

راسلني
الهاتف

+201096280739

اتصالواتساب

Mohamed Hassan Aboelnaga

SOC Admin

© 2026 Mohamed Hassan Aboelnaga. جميع الحقوق محفوظة.