At Kaneka North America, I monitor Secureworks Taegis XDR and investigate alerts using firewall telemetry and endpoint data. I assess suspicious activity to distinguish false positives from confirmed security incidents.
When an identity-based incident is confirmed, I follow the incident response playbook to contain affected Entra ID accounts, reset credentials and MFA methods, and verify activity with users. I also investigate phishing in Microsoft Defender and document findings and remediation steps.
I partner with the infrastructure team to organize Cisco Catalyst 9000 switch stacks and clean up configurations. I also respond to network outages and connectivity issues and provide Tier 2 support to users.
In my Splunk SIEM home lab, I configured Windows event-log ingestion, developed and tested detections mapped to MITRE ATT&CK, and built a dashboard for alert monitoring. I documented the detection logic, tuning decisions, and testing in a public GitHub repository.
