Open to opportunities

Ebenzer Alemu

@ebenzeralemu

Message

I investigate security alerts, phishing threats, and network activity using SIEM tools.

United States

Message

What I'm looking for

I'm looking to grow in security operations, threat detection, incident response, and phishing investigation while applying SIEM, network analysis, and automation skills.

At Genpact, I monitored 50+ daily Splunk SIEM alerts, tuned detection logic, and triaged 20+ ServiceNow tickets each day while escalating confirmed threats with containment steps.

I've investigated phishing cases using incident-response playbooks, reducing average escalation time by 15%, and identified indicators of compromise across security incidents for escalation to senior cybersecurity staff. I also documented more than 100 tickets in ServiceNow and Jira, tracking anomalies and access issues closely.

Outside of work, I built a virtualized Splunk SOC lab and an automated phishing detection pipeline using Python, VirusTotal, URLscan.io, and YARA. I'm continuing my information security education through an M.S. track and CompTIA Security+ preparation.

Experience

Work history, roles, and key accomplishments

IT Support Analyst, Security Operations

Genpact

Jan 2024 - Aug 2024 (7 months)

Monitored 50+ daily alerts in Splunk SIEM, tuning detection logic to validate true positives daily. Triaged 20+ tickets daily in ServiceNow, escalating confirmed threats with detailed containment steps.

Splunk SIEM ServiceNow Incident Response Phishing Analysis