Details
Skills
Threat Analysis, Incident Response, Threat Hunting, MDR Operations, Log Analysis, Endpoint Security Monitoring, Network Traffic Analysis, SIEM Monitoring, IOC/IOA Analysis, MITRE ATT&CK, Framework, Windows Event Log Analysis, TCP/IP, Routing & Protocols, Escalation & Triage, Adversary TTP Analysis, Vulnerability & Exploit Awareness, Customer Communication, Documentation & Reporting, PowerShell
Operating Systems: Windows (workstations & servers), Linux, macOS
Network Security: Firewalls, IDS/IPS, network traffic analysis, TCP/IP
SIEM Platforms: Microsoft Sentinel, Microsoft Defender, Google Chronicle, Splunk
Endpoint Security: CrowdStrike, FireEye HX
Incident Response: Log analysis, threat detection, triage, case documentation
Scripting: PowerShell