Gabriel Usen

I’m a Cloud Security and Incident Response Analyst focused on securing enterprise infrastructure, investigating security events, and continuously monitoring cloud environments. I bring hands-on experience across Microsoft Sentinel, Azure Monitor, and Log Analytics to detect threats and strengthen cloud security posture.

In my current role, I monitor and analyze network traffic with Suricata IDS to identify malicious communication patterns and command-and-control activity. I also perform digital forensics investigations using Autopsy and Volatility to analyze disk artifacts and volatile memory, supporting root-cause analysis and evidence collection.

I’m especially strong in identity security and incident response workflows. I implement and maintain RBAC, Privileged Identity Management (PIM), and Conditional Access Policies to reduce privilege misuse risks, and I respond to incidents with containment and remediation actions such as account lockouts, credential resets, host isolation, and firewall rule updates.

Before this, I supported customers and deployments through engineering and operations work, resolving Exchange Online and on-premises mail transport issues while improving resolution time and migration efficiency. I also deployed internal web applications using Azure App Services, and I contribute to blue team and vulnerability management labs—supported by certifications including AI-900 Microsoft AI Fundamentals and Securiti AI Security & Governance.