Sari Taher 👤

Sari Taher

Cybersecurity Consultant

4+ years leading incident response, threat hunting, and digital forensics across enterprise environments — building mature SOCs that turn alerts into outcomes.

About Me

Sari Taher

I'm Sari Yaseen Taher, a Cybersecurity Consultant based in Riyadh, Saudi Arabia, with over four years of hands-on experience delivering and managing incident response engagements across enterprise environments.

I regularly lead high-severity investigations, coordinate response activities, and support stakeholders through containment, recovery, and post-incident improvement. My focus spans detection engineering, threat hunting, and digital forensics — with a proven track record of improving SOC maturity through governance, automation, performance metrics, and structured operating models aligned with business risk.

Currently consulting at Accenture, with prior roles across Tamkeen Technologies, Tuwaiq Academy, and Cipher. I hold a B.Sc. in Cybersecurity & Digital Forensics from Prince Mugrin University.

Download CV Get in Touch

Experience

Dec 2025 — Present · Riyadh
Cybersecurity Consultant
Accenture
Feb 2024 — Dec 2025 · Riyadh
Cybersecurity Trainer
Tuwaiq Academy
Aug 2025 — Dec 2025 · Riyadh
Cybersecurity Expert
Tamkeen Technologies
Sep 2024 — Aug 2025 · Riyadh
Digital Forensics & Incident Response Consultant
Tamkeen Technologies
Sep 2022 — Sep 2024 · Riyadh
Senior Cybersecurity Analyst
Cipher Company
Mar 2022 — Sep 2022 · Riyadh
SOC Analyst — Internship
Cipher Company

Certifications

GX-FA-GIAC Experienced Forensic Analyst GCFA-GIAC Certified Forensics Analyst OSDA-OffSec Defense Analyst GRCP-GRC Professional eCMAP-Malware Analysis Professional eCTHPv2-Threat Hunting Professional eCDFP-Digital Forensics Professional eCPPTv2-Professional Penetration Tester

Technical Skills

SIEM / Analytics

Splunk, ELK, LogRhythm, Exabeam, Wazuh

EDR / NDR

CrowdStrike, Cybereason, ExtraHop (NDR)

Email Security & Sandbox

Proofpoint (policy, quarantine triage), VMRay (behavioral detonation & IOC extraction)

SOAR / IR

FortiSOAR playbooks — isolation, IOC blocking, credential resets, approvals, webhooks, evidence packaging

Forensics

Volatility, Velociraptor, registry/artifact parsers, timeline tooling, evidence hygiene

Governance

ISO 27001 ISMS, SOC process maturity (CMM), KPI programs (MTTD/MTTR, TPR/FPR, SLA)

Scripting

C++, Python, Bash, Batch — investigation utilities and automation

Languages

Arabic (Native) · English (Fluent)