Maiwand Hamidi
Senior Security Analyst
Inventx AG Switzerland
Maiwand Hamidi is a Senior Security Analyst based in Switzerland, specializing in Cyber Defense and Security Operations. He holds a Master's degree in IT Security and is an OSCP-certified professional. He gained experience across PwC, Siemens, IBM, and NTT DATA. Working in a 24/7 SOC, Maiwand has hands-on experience across Incident Response, Security Engineering, and Cyber Threat Intelligence, as well as advising organizations on SOC operations and organizational structures. He serves as Co Chair of the FIRST SOC SIG and is the creator of Cybersecurity Career Stories, where he interviews cybersecurity professionals about their careers and experiences. Addtionally he established the first OffSec Chapter in Switzerland where he currently serves as the Ambassador.
Speaker sessions
Briefings and Arsenals | Confirmed Speakers | No Session Assigned
Placeholder session for confirmed speakers without an assigned session, allowing them to be pushed to Swapcard and Visit.
- 07:30
- Tue
- 01 Dec
Stage:
Briefing Stage 2
Sessions Type:
Keynote
Escaping Tiered SOC Operations: A Role-Based Model for Modern SOCs
Tiered SOC models have clear responsibilities but they often tend to come with challenges such as repetitive work which results in limited career development, knowledge silos, and staff turnover.In this talk, I present our role-based SOC operating model, which has been successfully implemented in our 24/7 Security Operations Center across two locations (Canada and Switzerland). Instead of assigning analysts to fixed tiers, responsibilities are grouped into different roles that analysts rotate through on a defined schedule.The presentation will cover the following:- Explanation why we decided to avoid the traditional tiered model- The thoughts for the design behind our role-based operating model- How responsibilities are categorized into different roles (e.g. Detection Analysis, Incident Response, Cyber Threat Intelligence)- Management of the rotation schedule- Operational considerations for maintaining a 24/7 SOC across two international locations- Advantages we have experienced, including staff development, ownership, flexibility, and knowledge sharing- Challenges, trade-offs, and key takeaways after using this model for years- Practical recommendations for other organizations who would consider a similar approach
- 15:10
- Wed
- 02 Dec
Stage:
Briefing Stage 2
Sessions Type:
Keynote