Available immediately · Dublin, Ireland
Saljook HaiderCyber Security Analyst
Security Operations/Incident Response/Threat Detection
I'm a SOC-focused cyber security analyst. For two years I triaged Splunk alerts, investigated endpoint, identity and email threats, and escalated confirmed incidents. I hold BTL1 (Gold) and CompTIA Security+, and a First Class MSc in Cybersecurity. Before security I was a frontend developer, so I like automating the boring parts with Python and PowerShell.
- BTL1 Gold · 95/100
- CompTIA Security+ · 870/900
- MSc Cybersecurity · First Class
Now
2 Nov 2026Open to SOC analyst and incident response roles in Dublin or remote. Building this site in public.
Local time in Dublin
2 yrs
SOC experience
200+
alerts triaged a week
40+
incidents escalated
95/100
BTL1 Gold score
Featured investigations
SIEM · Threat detection playbook
Hunting malicious PowerShell with Splunk and Sysmon
How I detect, triage and scope suspicious PowerShell activity in Splunk, from an encoded command line to persistence and outbound connections, with the SPL I use at each step and the ATT&CK techniques it maps to.
- Splunk
- Sysmon
- Windows Event Logs
Network · Traffic analysis playbook
Investigating a suspicious PCAP in Wireshark
A repeatable workflow for working through a packet capture, from protocol overview to C2 beaconing, DNS abuse and file downloads, with the exact Wireshark filters and how each finding becomes an IOC.
- Wireshark
- TCP/IP
- DNS
DFIR · Digital forensics playbook
Triage of a compromised Windows host, from memory to timeline
How I acquire and analyse memory and disk evidence from a suspected compromised Windows machine with FTK Imager, KAPE, Volatility 3 and DeepBlueCLI, and turn scattered artefacts into one incident timeline.
- FTK Imager
- KAPE
- Volatility 3
All projects
6 case studies, incl. my MSc dissertation
Technical expertise
SIEM & logs
- Splunk
- Windows event logs
- Sysmon
- Auth logs
- DNS / HTTP logs
Forensics & IR
- KAPE
- FTK Imager
- Autopsy
- Volatility
- DeepBlueCLI
Threat intel & email
- MITRE ATT&CK
- VirusTotal
- CyberChef
- WHOIS
- MXToolbox
Network
- Wireshark
- TCP/IP
- DNS
Identity & endpoint
- Active Directory
- Entra ID
- Microsoft 365
- Windows
Automation & AppSec
- Python
- PowerShell
- OWASP Top 10
- Semgrep
- Bandit
MITRE ATT&CK coverage
17 techniques across 8 tactics documented in my case studies.
Persistence
Defense Evasion
Discovery
Lateral Movement
Command and Control
Exfiltration
Professional experience
Jan 2024 – Jan 2026
Cyber Security Analyst · 3AM Technologies
Security operations and incident response.
- Triaged 200+ Splunk alerts a week, correlating system, network and endpoint logs
- Escalated 40+ confirmed incidents and supported containment: account disablement, host isolation, IP/domain blocks
- Analysed 50+ reported phishing emails a month, extracting and enriching IOCs
- Tuned detections to cut false positives by 30%; automated triage with Python and PowerShell, saving ~8 hours a week
Jul 2021 – Sep 2023
Frontend Developer · kreativrudel GmbH & Co. KG
Secure web solutions, remote from Germany.
- Found and fixed input validation failures and access misconfigurations in live client sites
- Explained security risk to non-technical clients in Germany, Switzerland and Austria
Certifications
Security Blue Team
Gold badge · 95/100
- Digital forensics
- Incident response
- SIEM
- Malware analysis
- Threat hunting
CompTIA
Score 870/900
- Network security
- Endpoint protection
- Risk management
- Cryptography
- Cloud security
Education
2025 – 2026
MSc CybersecurityFirst Class Honours · Dublin Business School
2019 – 2023
BSc Software EngineeringFirst Class Honours · University of Lahore
Latest posts
- When hackers turned supermarket freezers into ovens: Europe's refrigeration attacks explained2 Nov 2026
- Sysmon Event ID 13: catching registry persistence before it survives a reboot2 Nov 2026
- Analysing a phishing email with CyberChef: recipes that save time2 Nov 2026
Interactive terminal
Make it yours
Pick an accent colour or switch to light mode. The terminal accepts themes too, and a few hidden commands.
Contact
Hiring a SOC analyst in Ireland?
Looking for my next SOC or incident response role. If you're hiring, or just want to talk detections, say hello.