Isaac Paitoo

I’m a cybersecurity professional with 5+ years of Security Operations Center (SOC) experience supporting enterprise, federal, and cloud environments. I focus on threat detection, incident response, SIEM monitoring, and threat intelligence-driven investigation.

I bring hands-on experience building Splunk dashboards and operational reporting, along with creating SOPs and runbooks that analysts can reliably follow during high-pressure events. My work is aligned with NIST 800-53 and FedRAMP requirements, especially when cloud and identity security are involved.

At IBM, I investigate and triage 50–100+ security alerts daily across SIEM, EDR, IAM, and cloud environments. I analyze AWS, Okta, firewall, endpoint, authentication, and network security events—reviewing CloudTrail, GuardDuty, WAF, ELB, and endpoint telemetry to validate threats, enrich findings with reputation services, and escalate verified incidents with timelines, findings, and response recommendations.

Before IBM, I supported FedRAMP authorization and compliance work at Kratos Defense, performing NIST 800-53 security control reviews and risk assessments and developing SSP, SAP, and SAR documentation. Earlier roles included SOC monitoring and event correlation at SAIC using Splunk and threat intelligence tools, plus deskside and data center operations experience that strengthened my troubleshooting discipline and security compliance mindset.