Looking for a job

Bezalel Nwosu

@bezalelnwosu

Message

I monitor, investigate, and improve detection for fast-moving security operations.

Nigeria

Message

What I'm looking for

I'm looking for remote or relocation-supported security operations work where I can investigate alerts, improve detections, apply incident response frameworks, and grow within a fast-paced security team.

I'm currently supporting a U.S.-based managed security services provider, monitoring and triaging 100–150 security alerts each week in Microsoft Sentinel while maintaining SLA compliance.

I investigate phishing, endpoint compromise, and suspicious authentication events by correlating Azure AD, Windows Event Logs, and Microsoft Defender for Endpoint telemetry. I build and tune KQL detections to reduce false positives and improve analyst response time.

I structure investigations using MITRE ATT&CK and the NIST Incident Response Lifecycle, documenting incident timelines and escalating confirmed incidents to Tier 2/3 teams with clear findings that support faster resolution.

Previously, I taught SOC-focused cybersecurity training at Flowcode Tech Hub, delivering hands-on phishing and SIEM investigation labs for more than 40 students. I'm CompTIA CySA+ certified and hold Microsoft Security Operations Analyst Associate and Azure Fundamentals certifications.

Experience

Work history, roles, and key accomplishments

Current

SOC Analyst

Current

U.S.-Based Managed Security Services Provider (MSSP)

Jan 2025 - Present (1 year 8 months)

Monitors and triages 100-150 security alerts weekly in Microsoft Sentinel, maintaining SLA compliance. Investigates phishing, endpoint compromise, and suspicious authentication events, and builds custom KQL detection queries to reduce false positives.

Azure AD Windows Event Logs Microsoft Defender For Endpoint Incident Response Threat Detection Log Analysis