ARCHITECTING ENTERPRISE SOC Ecosystems.
AUTOMATING INCIDENT RESPONSE.
Cybersecurity Pre-Sales & Solutions Engineer specializing in SOC Architecture, SIEM/SOAR Automation, and Splunk Enterprise Administration.
Certified Vendor Expertise
Splunk Enterprise Certified Admin
Issued: Aug 27, 2026
Enterprise Splunk cluster management, indexer clustering, search head management, deployment servers, SPL performance tuning, and data onboarding architecture.
Why Legacy Security Operations Fail
Enterprise SOCs face critical scaling bottlenecks. Without automated triage and tool-agnostic sizing, security teams drown in noise.
Alert Fatigue
Un-tuned SIEM correlation rules inundate SOC analysts with false positives, causing critical threat signals to be missed.
Manual Containment
Manual incident triage and disconnected endpoint hand-offs delay containment, allowing lateral adversary movement for hours or days.
Fragmented Visibilty
Fragmented EDR, NDR, and log collection tools lead to severe telemetry blind spots and enterprise budget overspend.
Core Pre-Sales Offerings
Technical pre-sales solutions engineering, architecture design, and automation pipelines.
SOC Sizing
Capacity planning, infrastructure node sizing, and architectural scoping for enterprise SOC deployments.
SIEM/SOAR
Automated playbook development, custom middleware orchestration, and rapid incident response automation.
Telemetry Pipeline
Log ingestion lifecycle management, index optimization, and cross-stack event correlation across security telemetry sources.
Before vs. After Deployment
Interlocking transformation workflow: Legacy manual bottlenecks flowing into Taha Sakhi's automated SOC architecture.
| Metric | Legacy Manual SOC | with Taha Architecture |
|---|---|---|
Incident Triage Velocity | 45+ Minutes (Manual Tier-1 Analysis) | < 5 Second (LLM powered Threat Triage) |
Host Containment Execution | Manual Ticket Handoff (Hours Delay) | Automated Host Isolation |
Adversary Simulation Block Rate | Unvalidated Security Controls (< 30%) | 85% Block Rate Across Stacks A, B1–B3 |
Mean-Time-To-Resolution (MTTR) | High Operational Outage Latency | 60% MTTR Reduction |
Technical Case Studies
Architecting Scalable Enterprise SOC Ecosystems
Modular risk-based SOC baseline stacks (Stacks A, B1-B3) using Wazuh, Suricata, Security Onion, Squid, and Shuffle. Designed to scale from standard endpoint visibility to full automated containment and adversary simulation.
Engineering an Autonomous SOC: From Raw Telemetry to AI-Powered Orchestration
Engineered an autonomous AI-powered Security Operations and SOAR middleware platform to eliminate alert fatigue and automate endpoint containment.
Implementing a Monitoring Platform for Enterprise IT Infrastructure
Centralized enterprise NOC monitoring across 250+ nodes, eliminating fragmented manual IT checks and reducing time-to-resolution by up to 60%.
Professional Engagement Pathways
Flexible pathways tailored for enterprise recruiters hiring full-time pre-sales talent and organizations seeking structured security advisory.
Full-Time Enterprise Pre-Sales Engineer
Morocco-Based / Enterprise Opportunity
Customer-facing technical pre-sales engineering, PoC execution, Splunk cluster sizing, RFP technical responses, and executive solution demonstrations.
Core Focus & Deliverables
Enterprise SOC Advisory & Sizing
Structured Advisory & Technical Scoping
Structured technical advisory for enterprise SOC baseline sizing (Stacks A, B1–B3), custom FastAPI SOAR middleware integration, and telemetry pipeline optimization.
Core Focus & Deliverables
PoC Architectural Scoping Blueprint Guarantee
Every pre-sales discovery session includes a complete technical architectural diagram, SIEM/SOAR integration scope, and node sizing model prior to any contractual commitment.
Inquiry FAQ
Yes. Both my Enterprise Admin and Power User certifications are available for official verification via Credly.
Academic Background
Review academic highlights or request full technical CV delivery to your enterprise work email.
Summary
Cybersecurity Pre-Sales & Security Solutions Engineer specializing in SOC Architecture, SIEM/SOAR deployment, and AI-powered incident response automation.
Verified Credentials & Skills
Experience Highlights
Cybersecurity Engineer
ITS, Al Akhawayn University
Engineered CyberAegix AI SOAR, integrated Cortex XDR API and Security Onion.
Cybersecurity Solutions Intern
Innovatech Consulting
Architected 4-tier SME SOC baseline stacks (Stacks A, B1-B3) with 85% block rate.
SOC Engineer
TECHSO GROUP
Built automated 24/7 OpenCVE vulnerability intelligence engine.
Technical Instructor
Neurones Tech & Central Bank of Guinea (BCRG)
Delivered Allot ACG2000 hardware security masterclasses.
Academic Degree
Bachelor of Science in Computer Science, Minor in Business Administration — Al Akhawayn University
Request CV
Enter your email below to instantly receive Taha Sakhi's full CV
Contact
Get in touch for enterprise pre-sales inquiries, architectural scoping, or full-time opportunities.