Денис Смирнов

I am a Senior Security Operations Engineer focused on cloud and endpoint security, SIEM engineering, and automation. I bring hands-on experience securing hybrid Azure and AWS environments and hardening infrastructure and detection tooling.

I have successfully implemented Azure Sentinel and Wazuh to optimize security monitoring and detection, and developed automation that reduced analysis time by 80%, lowered false positives by up to 90%, and increased asset coverage from 50% to 90%.

My technical work spans EPP/EDR (ESET, Microsoft Defender for Endpoint), Defender for Cloud, Defender for Office 365, Rapid7, Azure Sentinel, Wazuh, and vulnerability platforms such as Bitsight and SecurityScorecard. I use Python for REST API integrations, Windows automation, SIEM automation, and custom vulnerability analysis scripts, and apply frameworks like MITRE ATT&CK in investigations.

I am detail-oriented, goal-driven, and experienced in DFIR, L3 SIEM incident analysis, phishing response (KnowBe4), security tool efficiency testing (Cymulate, Picus), and customer-facing demonstrations. I have passed AZ-500, SC-200, and MS-500 courses and hold Safetica certifications, and I seek opportunities to drive measurable improvements in detection and coverage.