Abdullaah Yaseen — Cybersecurity Engineer

/ about me

I'm a cybersecurity engineer and founder based in Phoenix, AZ. I build detection systems, agentic AI tools, and full-stack applications — with a focus on making enterprise-grade security accessible to small and mid-sized businesses.

My flagship project, ARIA, is an autonomous SOC pipeline that polls Microsoft Sentinel, triages alerts with AI, maps threats to MITRE ATT&CK, and automates responses via Microsoft Defender — all aligned to NIST CSF 2.0.

Before going independent, I sharpened my skills at The Cyber Range, where I built agentic AI SOC systems and ran threat hunting operations targeting TOR traffic, brute-force attacks, and malware infections. I also shipped BBM Cleaning's production site and the Tote4Rent rental platform.

When I'm not in the terminal, I'm thinking about how AI can close the security gap for organizations that can't afford a full SOC team.

// tech stack

Microsoft Sentinel

NIST CSF 2.0

Python

Threat Hunting

Microsoft Defender

Splunk / SPL

Next.js / React

Azure / KQL

MITRE ATT&CK

PowerShell

/ experience

CISO Global

Magna5

Yaseen Enterprise

TBConsulting

Log(n) Pacific

Freelance Dev

SOC Analyst @ CISO Global

March 2026 — Present · Scottsdale, AZ

Investigate identity-based alerts using Microsoft Sentinel, focusing on login anomalies, MFA failures, and privilege misuse.
Analyze authentication logs including Azure AD sign-ins, conditional access results, and risky user activity.
Perform threat hunting using KQL across identity, endpoint, and network telemetry.
Investigate endpoint activity using SentinelOne Deep Visibility with focus on credential access and persistence.
Support incident response by validating identity-related threats and recommending remediation actions.

SentinelKQLSentinelOne Azure ADThreat Hunting

Tier 1 Engineer @ Magna5

March 2025 — March 2026 · Phoenix, AZ

Investigated security incidents using Microsoft Sentinel, Defender XDR, and SentinelOne across identity and endpoint layers.
Performed IAM tasks including RBAC updates, MFA configuration in Microsoft 365 and Azure AD.
Analyzed phishing attacks and credential theft attempts impacting user identities.
Conducted DNS and authentication log analysis to trace unauthorized access attempts.
Used PowerShell to automate user access reviews and remediation tasks.
Documented incidents with clear identity impact and escalation paths.

SentinelDefender XDRSentinelOne PowerShellAzure AD

Founder @ Yaseen Enterprise

2024 — Present · Phoenix, AZ

Founded and leading development of ARIA, an autonomous SOC pipeline for SMBs that automates threat detection, triage, and response end-to-end.
Architected Microsoft Sentinel polling and alert enrichment pipeline with AI-powered triage logic, reducing manual analyst workload.
Integrated Microsoft Defender API for automated VM isolation on confirmed threat events.
Mapped detection coverage to MITRE ATT&CK and aligned program framework to NIST CSF 2.0.
Incorporated OTX AlienVault and CISA KEV for real-time threat intelligence enrichment and Telegram alerting.

PythonMS SentinelAzure MITRE ATT&CKNIST CSF 2.0Defender API

SOC Analyst @ TBConsulting

March 2024 — March 2025 · Phoenix, AZ

Monitored and analyzed security alerts using Splunk and Microsoft Sentinel across 1,000+ endpoints.
Investigated unauthorized access, lateral movement, and account misuse.
Enforced RBAC policies and MFA settings in Azure AD and Microsoft 365.
Built KQL queries to detect login anomalies and privilege escalation patterns.
Managed incidents in ServiceNow with focus on identity-related threats.
Performed root cause analysis on compromised accounts and access failures.

SplunkSentinelKQL Azure ADServiceNow

SOC Analyst @ Log(n) Pacific

January 2025 — April 2025 · Remote

Performed SOC monitoring and incident response using Microsoft Sentinel and Defender for Endpoint.
Conducted threat hunting using KQL across Azure AD and Log Analytics data.
Created and tuned detection rules in Sentinel to reduce false positives and improve alert quality.
Investigated endpoint and identity-based threats using EDR tools.
Performed vulnerability management using Tenable and supported remediation efforts.
Applied NIST and MITRE ATT&CK frameworks during investigations and response.

SentinelDefenderKQL TenableMITRE ATT&CKNIST

Developer @ Freelance

2024 — Present · Remote

Built and deployed bbmcleaningaz.com — production Next.js site for a Phoenix commercial cleaning company, live on Vercel with Resend-powered contact form.
Developed Tote4Rent, a local rental platform with booking management and inventory tracking built on Next.js, React, and TypeScript.
Designed and implemented full-stack solutions from UI through deployment, managing client relationships end-to-end.

Next.jsReactTypeScript VercelResend

AbdullaahYaseen

Abdullaah
Yaseen