Christopher Thatcher

I’m a Cybersecurity and Security Operations professional with hands-on experience in SIEM monitoring, security incident detection, log analysis, and threat investigation across high-volume environments. I focus on real-time incident triage, escalation management, and audit-ready documentation, using SOC workflows and the MITRE ATT&CK framework.

In a 24/7 operational setting, I triaged 15–25 incidents per shift and maintained an average response time under 5 minutes. I kept 100% incident documentation by recording all security events in a shift log database, and I sustained a 98%+ security compliance rate across 500+ monthly events.

I also build and validate skills through security labs and projects, including Splunk SIEM threat investigation with SPL queries and event correlation. I’ve conducted network enumeration and vulnerability assessment with Nmap, implemented least-privilege controls in Active Directory, and supported malware/file triage with ClamAV workflow using hash verification (MD5/SHA256).

My approach is analytical and detail-driven: I use Wireshark PCAP analysis to trace suspicious activity, run memory forensics with Volatility to reconstruct execution chains, and analyze Cowrie honeypot telemetry to improve detection visibility. I thrive on situational awareness and clear, evidence-based reporting that strengthens detection, containment, and hardening.