Looking for a job

Alejandro Rojas

@alejandrorojas6

Message

Senior Security Analyst at QAD who developed 30+ Tines SOAR workflows and automated Tier-1 alert triage.

Mexico

Message

At QAD, I administer CrowdStrike Falcon and investigate security alerts across multiple EDR and SIEM platforms. I developed and maintain 30+ Tines SOAR workflows, including an automated Tier-1 alert triage bot that enriches events, prioritizes detections, and automates escalation notifications.

At QAD, I also automated Exabeam agent deployment and rsyslog configuration, and created Python and PowerShell scripts for investigations and security automation. Earlier, at IQSEC, I investigated alerts and supported endpoint security operations, vulnerability investigations, and security monitoring.

Experience

Work history, roles, and key accomplishments

Current

Senior Security Analyst

Current

QAD

Jul 2026 - Present (3 months)

Administer CrowdStrike Falcon for 8,000+ endpoints, investigate security alerts across multiple platforms, and develop Tines SOAR workflows to automate SOC processes. Promoted twice based on technical performance and automation initiatives.

CrowdStrike Falcon Cloud Security Exabeam Darktrace Cortex XDR LogRhythm Tines Python PowerShell Incident Response Threat Analysis IOC Analysis SOAR API Integration Workflow Automation Alert Triage Security Monitoring Mentorship

Security Analyst

QAD

Mar 2024 - Jun 2026 (2 years 3 months)

Investigated security alerts across CrowdStrike Falcon, Exabeam, Darktrace, Cortex XDR, Phisher, and LogRhythm, performing alert triage, threat analysis, and incident validation. Developed and maintained Tines SOAR workflows to automate SOC processes and reduce alert fatigue.

Associate Security Analyst

QAD

Apr 2023 - Feb 2024 (10 months)

Supported security operations, including alert triage, threat investigation, and documentation. Contributed to automation initiatives and security platform administration.

Incident Response Alert Triage Threat Investigation Security Monitoring Documentation Automation

Security Analyst

IQSEC

Jan 2022 - Apr 2023 (1 year 3 months)

Investigated security alerts using CrowdStrike, Cortex XDR, Darktrace, Arbor, TrapX, and Microsoft security solutions. Performed alert triage, threat analysis, and escalation management through ServiceNow.