At EVERTEC, I classified and labeled data in Microsoft Purview, using regular expressions and classifiers to protect information in SharePoint and OneDrive.
I reviewed and classified Purview DLP alerts, contacted users to validate business context, and escalated events when needed. I also administered Microsoft Defender policies and monitored IBM QRadar alerts.
I reviewed Conditional Access policies, users, groups, and MFA in Microsoft Entra ID and Active Directory, identifying access-control gaps. I identified, contained, and responded to an MFA-related incident, documenting its scope, timeline, and remediation.
Previously, at TMF Group, I isolated two servers from the EDR console and investigated incidents using CrowdStrike and Splunk detection use cases. At QUEOS SAS, I led the response to two phishing campaigns, from detection through containment and remediation.
