At BlackRock, I triaged email threats with Symantec and Proofpoint, identifying and remediating phishing, spoofing, and malicious attachment incidents.
I investigated ServiceNow incidents involving potential data leaks, endpoint alerts, and account compromise attempts. With Splunk, I correlated events across systems to investigate advanced persistent threats and insider risks.
I developed an automation tool that pulled correlated Splunk log data for flagged emails and populated ServiceNow tickets with structured summaries and header IDs, reducing manual data-gathering time and accelerating the investigation workflow.
I also authored SOC documentation and supported ISO and SOC 2 audit initiatives. Earlier at BlackRock, I worked on data operations and risk, using Aladdin and SQL for client fund account reconciliations and building Excel automation tools.

