Details
Skills
Security Operations & Threat Hunting: Threat Hunting, Incident Response, Security Operations Center (SOC) Support, Endpoint Detection and Response (EDR), Microsoft Defender for Endpoint (MDE), MITRE ATT&CK Framework, Firewall/NSG Configuration.
Vulnerability & Risk Management: Vulnerability Remediation, Risk Prioritization, CVSS Scoring, CVE/CWE Management, Enterprise Patch Management.
Automation & Scripting: PowerShell Scripting, Python, BASH Scripting.
Security Platforms & Cloud: Microsoft Sentinel (SIEM), Tenable.io, Microsoft Azure (VMs, Key Vault, NSG, Private Link, Log Analytics), Kusto Query Language (KQL), DISA STIGs, Identity & Access Management (IAM), Role-Based Access Control (RBAC), Windows & Linux Administration.
Frameworks & Compliance: NIST Cybersecurity Framework (CSF), NIST 800-53 (Security Controls), NIST 800-61 (Incident Handling), NIST 800-37 (Risk Management), NIST 800-40 (Patch Planning), PCI-DSS, GDPR, HIPAA, ISO 27001.
Certifications: Microsoft SC-200, CEH, CompTIA Security+, ITIL.
About
Cybersecurity Analyst specializing in SOC operations, detection engineering, and vulnerability remediation automation. Reduced 100% of critical vulnerabilities and strengthened SIEM/EDR detection capabilities through custom KQL rule development in Microsoft Sentinel and Defender for Endpoint. Experienced in enterprise vulnerability management using Tenable.io and aligned with NIST, PCI-DSS, and ISO 27001 frameworks.