At KPMG, I monitor and investigate security alerts across CrowdStrike Falcon, QRadar, Splunk, and Microsoft Sentinel. I fine-tuned SIEM correlation rules and detection use cases, reducing false positives by 25%.
I investigate endpoint, phishing, malware, and DLP alerts, and hunt for indicators of compromise and anomalous activity. I map incidents to MITRE ATT&CK and support response from containment through root cause analysis.
I also support SOAR playbooks, prepare incident timelines and RCA documentation, and coordinate remediation with infrastructure, network, endpoint, and application teams.
Before moving into SOC analysis, I provided desktop support at KPMG, troubleshooting Windows, applications, hardware, and network connectivity. I’m currently pursuing the EC-Council Certified Ethical Hacker (CEH) v13 AI certification.

