Adnan Attar

• Perform IAM operations including user provisioning, deprovisioning, access modifications, and role assignments.
• Conduct access reviews and certifications to ensure compliance with internal security policies.
• Investigate IAM-related security alerts and access violations escalated from SOC teams.
• Support Microsoft Entra ID (Azure AD) for identity lifecycle management and access governance.
• Collaborate with SOC, compliance, and IT teams to remediate identity-related security risks.
• Prepare audit evidence and reports for IAM controls and user access governance.

• Monitored and analyzed security alerts generated from SIEM tools to identify potential threats and anomalies.
• Performed triage and initial investigation of incidents including malware alerts, suspicious logins, and policy violations.
• Conducted log analysis across endpoint, network, and authentication logs to validate security events.
• Documented incidents, findings, and remediation steps in ticketing systems.
• Supported threat hunting activities and collaborated with senior analysts on incident response.
• Ensured timely escalation of high-severity incidents in accordance with SOC runbooks and SLAs.