Details
Skills
Security Operations & SIEM: Microsoft Sentinel, Microsoft Defender XDR, SIEM, Wazuh, KQL, log analysis, alert triage, escalation, security monitoring, detection engineering, EDR, SOAR, IOC/IOA
Threat Detection & Response: MITRE ATT&CK, threat hunting, incident response (IR), NIST 800-61, blue team / defensive security, vulnerability management, NIST CSF, malware analysis, adversary emulation (Metasploit, msfvenom, OpenVAS)
Digital Forensics: FTK Imager, Autopsy, memory forensics, Ghidra
Cloud & Network Security: Azure, Defender for Cloud, Entra ID (Azure AD), RBAC, conditional access, AWS, Wireshark, Nmap, Cisco IOS, port security
Programming & Automation: Python, PowerShell, Bash, Azure Logic Apps (SOAR), detection-as-code (Git), n8n Agentic Framework
About
Security Operations / SOC Analyst with an M.Sc. in Cybersecurity and hands-on experience across the modern Microsoft blue-team stack — Microsoft Sentinel, Defender XDR, and KQL. Built and operated an end-to-end cloud-native SOC in Azure: ingesting endpoint telemetry, authoring KQL analytic and hunting rules mapped to MITRE ATT&CK, automating containment with SOAR playbooks, and investigating full attack chains. IEEE-published in ML-based intrusion detection. Open to full-time, contract, and contract-to-hire roles nationwide.
Profile Photo
