At IBM Managed Security Services (IBM MSS), I led log onboarding and analytics validation for the migration from IBM QRadar to Microsoft Sentinel, helping ensure platform integration and operational readiness for clients.
I streamlined SOC investigation workflows by contributing documentation and developing and deploying SOAR playbooks in Palo Alto XSOAR. I also tuned custom detection rules in Microsoft Sentinel and Microsoft Defender XDR to reduce alert fatigue and false positives.
As a Senior Security Operations Analyst (Tier 2) and Incident Manager, I led investigations and rapid response for high-severity incidents, applying MITRE ATT&CK-mapped analysis. I directed containment and recovery while coordinating cross-functional responders.
I mentored SOC analysts, built escalation playbooks, and delivered KQL training. Earlier, at Hewlett Packard (HP), I managed Active Directory and Exchange identity lifecycle and administered identity and access management controls.
