Looking for a job

Adam Brenden

@adambrenden

Message

I lead incident response, threat hunting, and SOC operations across enterprise, MSP, and client security environments.

United States

Message

What I'm looking for

I'm looking to lead incident response, threat hunting, SOC operations, and security program maturity work while helping teams turn technical risk into practical remediation.

At Stantec, I lead incident response with Microsoft Sentinel, CrowdStrike, and Proofpoint, managing containment, evidence collection, root-cause analysis, and documentation.

I hunt threats by correlating endpoint, identity, and behavioral signals across CrowdStrike and Sentinel, then tune policies, custom IOAs, and analytic rules to improve detection accuracy and reduce alert fatigue.

Through Doxology Labs, I support SMB and mid-market clients with incident response, AI governance, compliance readiness, security assessments, and risk evaluations mapped to NIST CSF, SOC 2, HIPAA, CMMC, and ISO 27001.

I've also strengthened client and SOC operations at Blackpoint Cyber, Stellar Cyber, Boise State University, Snell & Wilmer, Avertium, and Terra Verde by delivering response guidance, building processes, mentoring analysts, and improving investigation quality.

Experience

Work history, roles, and key accomplishments

Current

Founder & President

Current

Doxology Labs

Apr 2026 - Present (5 months)

Deliver incident response, AI governance, and compliance readiness support for SMBs and mid-market clients. Conduct security assessments and risk evaluations mapped to NIST CSF, SOC 2, HIPAA, CMMC, and ISO 27001.

Incident Response AI Governance Compliance NIST CSF SOC2 HIPAA CMMC ISO 27001 Risk Assessment

Current

IT Security Analyst

Current

Stantec

Feb 2025 - Present (1 year 7 months)

Lead incident response using Sentinel, CrowdStrike, and Proofpoint, handling containment, evidence collection, root cause analysis, and documentation. Conduct threat hunting and tune detection rules to improve accuracy and reduce alert fatigue.

CrowdStrike Falcon Cloud Security Microsoft Sentinel ProofPoint Incident Response Threat Hunting KQL Custom IOA Development Analytic Rule Tuning

Senior MDR Analyst

Blackpoint Cyber

Jul 2024 - Oct 2024 (3 months)

Delivered actionable incident reports and response guidance that accelerated containment and strengthened client security readiness. Audited and coached junior analysts to elevate investigation quality.

Incident Response MDR Documentation Mentorship Security Analysis

Technical Account Manager

Stellar Cyber

Oct 2023 - Apr 2024 (6 months)

Drove client success for XDR platform, coordinating cross-team communication and delivering clear use-case guidance. Built procedures and tooling to improve customer experience.

XDR Customer Success Technical Account Management Process Improvement

Lead Cyberdome Analyst

Boise State University

May 2022 - Sep 2023 (1 year 4 months)

Built operational SOC processes delivering risk assessments and security services for public-sector clients. Mentored student analysts through live investigations aligned with NIST standards.

SOC Operations Risk Assessment NIST Mentorship incident investigation

Security Analyst

Snell & Wilmer

Mar 2021 - May 2022 (1 year 2 months)

Monitored and triaged incidents, coordinating IT groups to facilitate proper handling with clear documentation. Responded to user-reported phishing, triaging threats and coordinating follow-up training.

Incident Triage Phishing Response Documentation Coordination

Technical Account Manager & Lead Network Security Analyst

Avertium & Terra Verde

Nov 2018 - Oct 2020 (1 year 11 months)

Served as primary client liaison aligning expectations with SOC operations and delivering vulnerability metrics. Performed SIEM monitoring, alert triage, tuning, and incident response to reduce false positives and accelerate resolution.

SIEM Alert Triage Tuning Incident Response Security Metrics Client Liaison