AYOOLA DARE - SOC Analyst II / SIEM Engineer (MTN Enterprise Project)

Summary

Experienced security operations professional with expertise in Security Operations Centre (SOC) monitoring, real-time security event analysis, and incident response. Proficient in SIEM platforms including Elastic Security, Microsoft Sentinel, ArcSight ESM, and Splunk, with advanced skills in KQL, EQL, and SPL for log analysis and detection engineering. Adept at threat hunting, rule tuning, false positive reduction, and developing detection use cases aligned with frameworks such as MITRE ATT&CK and NIST CSF. Skilled in utilising security tools like EDR, IDS/IPS, firewalls, PAM, DLP solutions, and cloud platforms including AWS and Microsoft Azure to optimise organisational security posture. Strong analytical abilities combined with cross-team collaboration ensure effective incident triage and escalation while supporting long-term cybersecurity resilience. Offering strong analytical skills and proactive approach to problem-solving. Knowledgeable about network security protocols and risk assessment. Skilled in communication, teamwork, and quick learning. Ready to use and develop skills in cybersecurity, incident response, and vulnerability management in the soc role.

Overview

3

years of professional experience

4

years of post-secondary education

1

Certification

Work history

SOC Analyst II / SIEM Engineer (MTN Enterprise Project)

DataSixth Security Consulting

Lagos

01.2023 - 05.2026

Monitor security events across enterprise systems in real time within SOC environment using SIEM platforms
Detect, analyze, and prioritize security incidents to support timely response and containment
Perform incident triage by validating alerts, identifying false positives, and escalating high-priority threats
Conduct proactive threat hunting to identify hidden threats, suspicious behavior, and potential vulnerabilities
Tune and optimize SIEM detection rules to improve detection accuracy and reduce alert noise
Reduced false positives by 30% through SIEM rule tuning and log pipeline improvements
Improved detection accuracy by 60% using enhanced correlation rules and behavioral-based detections
Reduced incident triage time by 25% by improving alert prioritization and investigation workflows
Analyze logs using KQL and other query languages to investigate security events and validate threats
Correlate logs across Windows, Linux, firewall, and authentication systems to identify attack patterns and indicators of compromise (IOCs)
Collaborate with SOC analysts, incident responders, and IT teams to resolve security incidents
Document incident findings and contribute to continuous improvement of SOC monitoring and triage processes
Support detection engineering by developing and maintaining SIEM use cases aligned with real-world threats

Security Engineer (Part-Time)

Salvatech Security

Lagos

09.2024 - 07.2025

Supported security monitoring and threat detection activities within client SOC environment
Conducted threat hunting and analysis of network traffic to identify suspicious activity
Developed KQL-based queries to support SIEM detection and threat validation
Identified and investigated network anomalies and potential security incidents
Built and improved detection use cases to align with evolving threat techniques
Collaborated with security teams to investigate and resolve identified threats

Education

Bachelor of Science (B.Sc.) - Accounting

Kwara State University

Nigeria

01.2015 - 01.2019

Skills

Security Operations Center (SOC) monitoring and operations
Real-time security event monitoring and alert analysis
Incident detection, triage, and escalation
Threat hunting and threat analysis
SIEM rule tuning and detection optimization
Log analysis using KQL (Kusto Query Language)
Incident response support and investigation
Detection engineering and use case development
Strong analytical and problem-solving skills

Cross-team collaboration and communication
SIEM Platforms: Elastic Security (ELK Stack), Microsoft Sentinel, ArcSight ESM, Splunk
Query Languages: KQL (Kusto Query Language), EQL, SPL, Kibana Query Language
Security Tools: EDR, IDS/IPS, Firewalls, PAM, NDR (ExeonTrace), DLP, Qualys, Nessus
Cloud Platforms: AWS, Microsoft Azure, Google Cloud Platform
Systems: Windows Server, Linux (Ubuntu), Docker
Scripting: Python, Bash
Frameworks: MITRE ATT&CK, NIST CSF, ISO 27001, PCI-DSS, CVSS