Open to opportunities

Damilola Famoofo

@damilolafamoofo

Message

SOC analyst specializing in detection engineering, incident response, and DLP.

United Kingdom

Message

What I'm looking for

I’m looking for a SOC/security operations role where I can drive daily incident investigations, tune KQL/SIEM detections, and improve playbooks—especially across phishing/BEC, identity compromise, endpoint threats, and DLP—while maintaining strong SLAs and escalation quality.

I’m a SOC / Security Operations Analyst with four years of hands-on experience across financial services and enterprise media. I investigate security incidents daily in Microsoft Sentinel and Microsoft Defender XDR, covering phishing and BEC cases, identity compromise, endpoint threats, and DLP incidents. I write and tune KQL detection rules while contributing to SOC playbook and SOP development.

I focus on structured alert triage, MITRE ATT&CK-aligned investigation, and rapid containment—maintaining SLA compliance on P1/P2 incidents and escalating confirmed threats with clear, evidence-ready documentation. Alongside incident work, I manage Purview DLP alerts and policy engineering (including Zscaler ZIA and Purview), and I support analyst training and runbooks for repeatable investigations. I hold SC-200 and am progressing toward CySA+.

Experience

Work history, roles, and key accomplishments

Current

Cyber Security Analyst (SOC)

Current

NBCUniversal

Jan 2025 - Present (1 year 6 months)

Investigates security incidents daily across Microsoft Sentinel and Defender XDR, including phishing/BEC, identity compromise, endpoint threats, and Purview DLP incidents. Writes and tunes KQL detection rules, manages incident triage and escalation, and contributes to SOC playbooks and evidence documentation.

Microsoft Defender Microsoft Entra ID Phishing Triage Incident Management Endpoint Threat Investigation DLP Microsoft Purview Playbooks

Security Operations Analyst (SOC)

Integrate Commercial Brokerage

Jan 2022 - Dec 2024 (2 years 11 months)

Performs 24/7 SOC monitoring and investigations across IBM QRadar and Microsoft Defender for Endpoint, covering phishing, malware, and network/email vectors. Tunes SIEM detections, enriches and escalates confirmed threats in ServiceNow, and documents investigation rationale aligned to MITRE ATT&CK.

QRadar Microsoft Defender For Endpoint Splunk ServiceNow ProofPoint Phishing Malware Analysis Virus Total Incident Runbooks

IT Support Analyst

Huawei Technologies

Apr 2014 - Dec 2021 (7 years 8 months)

Handled IT incident triage and technical escalation within ITSM SLA frameworks in a large enterprise environment. Managed user access provisioning and endpoint configuration while pursuing security certifications leading to a transition into security operations.

ITSM Triage Technical Escalation SLA Access Provisioning