Alvaro User

Managed incident response for retail, focusing on infostealers, data breaches, and DDoS attacks, ensuring thorough analysis of alerts. Led the creation and optimization of advanced SIEM use cases in Splunk and Microsoft Defender for Endpoint, enhancing detection and response capabilities. Responsible for Threat Hunting, proactively identifying attack signs and converting findings into actionable u

Served as a Senior L2/L3 Analyst in the Blue Team, administering SIEM platforms like GLORIA and Microsoft Sentinel. Developed playbooks and conducted threat hunting with Microsoft Defender for Endpoint, resolving advanced security incidents including ransomware and phishing. Applied DFIR techniques in major cybersecurity incidents and improved client security posture through initiatives like ranso

Administered middleware technologies, specifically Oracle WebLogic, and managed software deployments. Oversaw web and application server administration, handling ticketing for the Telefónica Genesis project.

Operated Linux and Windows systems, providing remote technical support and monitoring alerts. Managed ticketing and offered infrastructure support for ministries of the Andalusian Government.

Completed a Master's degree focusing on advanced cybersecurity concepts and practices. Gained expertise in incident response, threat hunting, and security operations, enhancing capabilities in digital forensics and incident response (DFIR).

Acquired practical skills in computer systems and network administration. Focused on managing and maintaining network infrastructure and IT systems, preparing for roles in IT support and administration.