Skills
MS Azure Security: MS Defender, Azure Security Center, Azure AD Identity, Azure sentinel
AWS Security: AWS Security Hub, Guard Duty, IAM Policies, SCP, KMS
SIEM Tools: Azure Sentinel, Splunk
Operating System: Kali Linux, Windows, IOS, Linux
Log Analysis & Threat Detection: Kusto Query Language (KQL), Splunk SPL, Log Analytics
Security Automation & SOAR: Microsoft Sentinel Playbooks, Logic Apps, Cortex XSOAR
Endpoint Detection & Response (EDR/XDR): Sentinel One, CrowdStrike Falcon, Trend Micro, Cortex XDR.
Threat Hunting & Incident Response: YARA rules, Sysinternals, Redline
Vulnerability & Threat Management: Tenable Nessus, Qualys
Threat Intelligence: MITRE ATT&CK, Cyber Kill Chain, Virus Total
Azure Active Directory: Privileged Identity Management (PIM), Conditional Access, MFA
Network Firewalls: Palo Alto, Palo Alto next gen firewall, Fortinet
Digital Forensics & Malware Analysis: Autopsy, Hybrid analysis, Any.Run
Languages: Python, Bash Scripting, PowerShell Scripting
About
In my current role as a Cyber Security analyst Ntirety, I have developed a deep understanding of security policies, standards, and best practices. I am well-versed in conducting risk assessments, identifying vulnerabilities, and implementing robust security measures to protect critical assets. My hands-on experience in implementing and managing security tools, such as SIEM systems and intrusion detection systems, has been instrumental in proactively addressing potential threats and vulnerabilities.