Usama Khan

I'm a SOC/Security Engineer at an MSSP-SOC operating across the EMEA and Asia regions, working across SIEM/SOAR engineering, threat hunting, incident response, and security automation. My day-to-day involves configuring and hardening SIEM platforms, integrating diverse log sources (endpoints, network devices, databases, cloud services), and building detection content to support 24/7 monitoring. I have hands-on experience designing SOAR playbooks for automated incident response, from IOC enrichment to automated blocking actions, and I use workflow automation tools like n8n to connect security platforms, streamline repetitive triage tasks, and reduce manual effort across the SOC. I've led threat hunting and incident response engagements involving multi-vector breaches, using XDR platforms to trace attack chains and deliver comprehensive assessment reports to leadership. I hold a BS in Software Engineering and an MS in Cybersecurity, along with CompTIA CySA+ and Microsoft SC-200 certifications. My graduate research focused on synthetic malware generation using GANs and diffusion models, which informs how I think about emerging threats and detection evasion. I enjoy sharing practical, real-world insights on the security tools and platforms I work with daily.