
In Progress
Posted
I’m researching how security teams investigate alerts and understand the current security state of their environment. I’m looking to speak with experienced cybersecurity practitioners for a paid 30–45 minute interview. This is not a technical implementation project and there is no preparation required. I’m primarily interested in understanding your real day-to-day workflow: what happens after an alert arrives, what tools you use, what information is missing, what repetitive work takes the most time, and where existing SIEM, EDR, XDR, or AI SOC products fall short. During the call, I’d like to discuss a recent or representative investigation and walk through questions such as: What did the initial alert tell you? What did you need to investigate next? Which tools or data sources did you check? How did you determine whether the activity was benign or malicious? How do you understand whether one host, user, or credential is related to a larger incident? What causes alert fatigue? How much manual enrichment or context gathering do you do? How are detection rules tuned for your organization? What do you wish your existing tools understood automatically? I’m especially interested in the gap between individual alerts and understanding the broader state of the environment, such as which machines may actually be compromised, how confident the team is, what evidence supports that conclusion, and how that understanding changes as new events arrive. Ideal candidates have hands-on experience in a SOC, MDR/MSSP, incident response, detection engineering, security operations, or blue-team role. Experience with tools such as Splunk, Microsoft Sentinel, QRadar, CrowdStrike, SentinelOne, Microsoft Defender, Okta, or similar platforms is helpful, but no specific vendor experience is required. I am particularly interested in speaking with people who have personally investigated alerts rather than only managed cybersecurity teams at a high level. Experience with AI SOC or security automation products is a bonus. Please include a short description of your current or previous security role, approximately how many years of hands-on experience you have, whether you have worked in an internal SOC or MSSP/MDR environment, and the security tools you regularly use. You must be able to communicate fluently in English during a live video call. If requested, you should be comfortable walking me through your typical investigation workflow during the call, for example by screen sharing a demo, test environment, sanitized screenshots, or a mock case. Do not share any confidential client, employer, customer, or sensitive production data.
Project ID: 40735911
15 proposals
Remote project
Active 5 days ago
Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs

I have hands-on cybersecurity experience with SOC-related tools and workflows, including Splunk, QRadar, SIEM alert analysis, log investigation, and security monitoring. I have worked through realistic security investigation scenarios and understand the process of analyzing alerts, gathering context, investigating users and hosts, and distinguishing benign activity from potential threats. I would be happy to discuss my practical experience and investigation workflow in a 30–45 minute interview. I can communicate fluently in English and am comfortable walking through a mock or sanitized investigation scenario.
$20 USD in 2 days
0.0
0.0

Hi, I've personally worked the alert queue, so I can give you the practitioner view you're after. Role: Senior Cybersecurity Engineer (current). Before that I was an L3 SOC Analyst on a multi-tenant managed SOC service (MSSP), and I designed and built SOCs for enterprise and national-agency clients. Hands-on experience: 4+ years, across internal SOC build-outs and MSSP/MDR-style multi-tenant operations. Day-to-day: triage and escalated investigations, threat hunting (MITRE ATT&CK), containment decisions, customer-facing incident reports, and detection engineering (I wrote 25+ correlation rules and SOAR playbooks and cut average triage time by 40%). Tools: FortiSIEM, FortiSOAR, IBM QRadar and IBM SOAR, Splunk, Wazuh / Security Onion, Suricata, TheHive/Cortex, MISP, SentinelOne, Trend Micro and Microsoft Defender EDR, Tenable and Rapid7. I can speak candidly about alert fatigue, manual enrichment, correlating host/user/credential activity into an incident picture, rule tuning per tenant, and where SIEM/EDR/SOAR tooling falls short. If helpful, I can walk through a mock investigation in my own lab, with no client data shared. Fluent English, available for a video call this week at a time that suits you. Sajid
$15 USD in 1 day
0.0
0.0
15 freelancers are bidding on average $17 USD/hour for this job

Happy to take part — this maps closely to hands-on work we do regularly. Background: 4+ years of hands-on security operations spanning penetration testing, application security, and enterprise SIEM/EDR/XDR deployment and tuning. Experience sits across MSSP/consulting-style engagements (70+ client environments) rather than a single internal SOC, giving a broad view of how different teams triage and investigate. Tools used regularly: Splunk, Wazuh, LogRhythm, Rapid7, Trend Micro Vision One/Apex One (EDR), Ivanti (patch/vuln), Fortinet FortiGate, plus manual investigation via Burp Suite, Wireshark, and custom log correlation. Fit for this research: Direct, hands-on alert triage and investigation experience (not just team management) — including determining benign vs. malicious activity, correlating hosts/users/credentials across a broader incident, and tuning detection rules for specific client environments. Also has direct exposure to where SIEM/EDR/XDR tooling falls short in practice, since this comes up constantly in real deployments. Comfortable walking through a sanitized/mock investigation via screen share, fluent in English for a live video call, and can do 30–45 minutes at a time that works for you.
$100 USD in 1 day
8.3
8.3

Affordable, Early Delivery. ★★★★★★★★★★★★★★I hold a Masters degree which gives me the requisite background to handle writing from various subjects. I am a highly committed person towards my work. You can rely on QualityXenter for quality and consistency in writing. We never violate copyright rules. I have vast amount of experience in this industry since I am working from 2015 as a professional writer. I provide many modifications till to get your satisfactions. I have access to enough journals to use in your research project. I always produce quality work at VERY LOW RATES so, don't worry if you have a low budget for your work, I will be very happy to make a new client like you. I am producing quality work for my clients including ARTICLE WRITING, REPORT WRITING, ESSAY WRITING, RESEARCH PAPERS, BUSINESS PLAN, TECHNICAL WRITING, MATLAB, THESIS, ACCOUNTING & FINANCE work ETC. Go through my profile link https://www.freelancer.com/u/qualityxenter
$12 USD in 11 days
6.4
6.4

Hi there, I’ve spent years working as a SOC analyst, diving deep into investigations after alerts come in and understanding the nuances of our security landscape. I know the ins and outs of how to sift through data, identify threats, and keep our environment secure. I noticed you’re keen on discussing the gap between individual alerts and the broader security state. I can share my experiences with tools like Splunk and CrowdStrike, detailing how I manage alert fatigue and the nuances of enriching data during investigations. I specialize in incident response and detection engineering, and I’m all about making workflows seamless and user-friendly. I’m committed to speedy communication and can turn around this chat quickly. Let me know if you are available for a quick chat! Regards, Wonita
$8 USD in 7 days
0.0
0.0

We have extensive experience as cybersecurity practitioners and are ready to share insights about our incident response workflows. Understanding the nuances of alert investigation is crucial for enhancing security operations. We noticed your interest in the gap between individual alerts and the overall security state. We have personally navigated the challenges of tools like Splunk and CrowdStrike while working on investigations. Our hands-on experience in a SOC environment equips us to discuss the repetitive tasks that consume time and the complexities of alert fatigue. Could you clarify if you're more interested in specific case studies or a general overview of our workflows during the interview? We look forward to the opportunity to discuss this further, and even if we don't get hired, we're happy to provide valuable insights. Regards, UzairPatell
$8 USD in 7 days
0.0
0.0

I have hands-on experience with security alert investigation and can walk you through how I approach triage, enrichment, correlation and deciding whether activity is benign or malicious. I’m available for the 30–45 minute call on short notice and can discuss the real gaps, repetitive work and context I’ve seen across SOC workflows without sharing any sensitive information.
$12 USD in 40 days
2.1
2.1

With a strong background in IT and cybersecurity support, I have amassed invaluable experience working hands-on in security operations centers (SOCs) where I've effectively analyzed and responded to various types of security alerts. This has honed my proficiency in using SIEM and EDR tools such as IBM QRadar, FortiSIEM, and LogRhythm - an expertise that I strongly believe we can put to good use in your research project.
$12 USD in 40 days
0.0
0.0

EVEN IF YOU DON'T HIRE ME, YOU'LL WALK AWAY WITH A FREE CONSULTATION. You're researching how security teams investigate alerts and understand the broader state of their environment after events arrive. The two hardest parts are capturing authentic day-to-day workflow and bridging the gap between individual alerts and confidence in what's actually compromised. I can conduct and participate in this research conversation at your budgeted rate. My background spans automation, process mapping, and working across complex tool ecosystems. I've designed workflow automation systems that connect multiple data sources and decision points, which directly mirrors how SOC teams correlate alerts across Splunk, Sentinel, or similar platforms to build incident context. I'm available for a 30-45 minute video call, can discuss investigation workflows clearly, and understand the constraint around confidential data. Let's schedule a time that works and dive into how your research subjects actually work. Message me to set up your free consultation and confirm the call timing. Kind regards, Cornelius
$8 USD in 40 days
0.0
0.0

> Hello, I am interested in your SOC Analyst project (ID 40735911). > > I have hands-on experience with Splunk, QRadar, CrowdStrike, and Incident Response. I can monitor SIEM alerts, triage phishing emails, analyze logs, investigate IOCs, and write incident reports following NIST framework. > > Skills: > - SIEM: Splunk, QRadar, Microsoft Sentinel > - EDR: CrowdStrike, Defender > - Tools: Wireshark, MITRE ATT&CK, VirusTotal, AbuseIPDB > - Ticketing: Jira, TheHive > > I am available 30 hrs/week from Litein, Kenya (GMT+3), flexible for night shift SOC coverage. I can start with a trial shift today and provide daily SOC handover report. > > Do you use Splunk or Sentinel for this SOC? Let's discuss your escalation process. > > Ready to start now. Then tap *Write my bid*.
$12 USD in 40 days
0.0
0.0

With your project's keen focus on gaining deep insights into the day-to-day workflows of cybersecurity practitioners, I believe my two-decade experience in the field would be a valuable asset to your research. Having worked in both internal SOCs and MSSPs, I possess a comprehensive understanding of various security tools such as Splunk, SentinelOne, Okta, among others, that you've mentioned. My proficiency in using these platforms combined with my strong analytical thinking and research skills enable me to swiftly identify actionable insights from diverse sources for effective decision-making. Throughout my career, I have spearheaded multiple sophisticated investigations and incident responses, providing me a broad perspective on honing not just technical aspects but also the procedural and strategic dimensions of handling and mitigating threats. Additionally, my background and hands-on experience with AI SOC and security automation products further amplify my potential to offer unique perspectives on how these technologies influence and augment the work of cybersecurity teams. The world of cybersecurity is dynamic and requires consistent adaptation; I am adept at staying informed about emerging trends and technologies which ensure that my insights are forward-thinking and tailored to contextual nuances. Let's have an insightful conversation where we share insights that can shape the future of this crucial domain.
$12 USD in 40 days
0.0
0.0

Dear Concern, I can answer all your queries as i have a deversified experience for about 10 years in Information Security, Cyber Security on different projects with Evomoerce companies, banks, Paymentgateways, and telecommunication, I have worked on Riskassessments and provided guidance to clients on SOC and SIEM solutions , i have already gone through these threat detection solutions. I have also worked on Advance Academic Research on AI, I can help you in understanding the threat intelligence and how to identify threat and vulnerabilities , and which tools are used for intrusion detection and protection Looking forward to answer your queries, and kindly note that i cannot give you a demo for the solutions like Q radar , wazu , yes but i can suggest you the tools and can provide a comprehensive guidance on how the tools work. Sincerely, Sabeen Hussain
$12 USD in 40 days
0.0
0.0

Hi, I’m a cybersecurity professional with hands-on knowledge of SOC operations, incident response, penetration testing, and ethical hacking. I can help investigate security alerts, analyze logs and suspicious activity, identify potential threats, and support incident response with clear documentation. I focus on understanding the actual issue before taking action and communicating findings clearly. I’m also comfortable working with security tools and following structured investigation and response processes. I’d be happy to discuss the project requirements and understand your current environment, tools, and expectations.
$8 USD in 40 days
0.0
0.0

Seoul, Thailand
Payment method verified
Member since Jul 5, 2020
$10-30 USD
$5000-10000 USD
$10-60 USD
₹1500-12500 INR
$250-750 USD
₹12500-37500 INR
$15-25 USD / hour
$15-25 USD / hour
$1500-3000 AUD
$2-45 USD / hour
₹1250-2500 INR / hour
$10-30 USD
min ₹2500 INR / hour
₹600-1500 INR
₹12500-37500 INR
₹750-1250 INR / hour
$30-250 USD
₹600-1500 INR
₹750-1250 INR / hour
$15-25 USD / hour