Brianne Waldron

I’m a CSOC Team Lead overseeing an Operations Center spanning CSOC and Service Desk functions, with experience leading multiple CSOC teams. I strengthen security posture in regulated environments by administering Microsoft 365 and Azure and focusing on incident response, SIEM engineering and governance, identity security, and privileged access management.

In my current role, I led a Privileged Identity Management (PIM) migration framework that moved 44 privileged role assignments to just-in-time access, and I built a four-tier role classification model. I also authored a passkey (FIDO2) deployment plan to advance phishing-resistant authentication across Entra ID, while conducting vulnerability scanning to support formal remediation planning.

I investigate alerts across Datadog, AWS GuardDuty/Detective, CrowdStrike, and Microsoft 365, and I coordinate fixes across systems and stakeholders to close out findings. I serve as lead security administrator across Entra ID, Intune, and Defender—enforcing RBAC and privileged access controls, overseeing endpoint security, and training/mentoring analysts through tabletop exercises, escalation frameworks, on-call procedures, and Tier 1 playbooks.