Looking for a job

Jarod Hagen

@jarodhagen

Security Analyst at Serve Robotics investigating a RAT attack and building SentinelOne persistence-hunting coverage.

At Serve Robotics, I investigated a confirmed RAT delivered through a malicious browser extension, isolated the endpoint, and remediated the issue before lateral movement. I also hunt across SentinelOne, Wazuh, OpenSearch, and JumpCloud while building persistence-hunting dashboards and infrastructure.

At PacketWatch, I served as the primary security consultant for enterprise clients and led incident response engagements from scoping through containment and recommendations. I responded to ransomware incidents with outside counsel and cyber insurance carriers, and used Velociraptor to analyze forensic artifacts and build timelines.

At Tokio Marine North America Services, I built a threat hunting program from the ground up and investigated Microsoft 365 and Entra ID compromises using KQL. I also mentored two junior analysts and wrote Python scripts to automate incident response tasks.

Experience

Work history, roles, and key accomplishments

Current

Security Analyst

Current

Serve Robotics

Jul 2026 - Present (4 months)

Led incident response for a confirmed RAT delivered via malicious browser extension, isolating the endpoint and remediating before lateral movement. Performs threat hunting across EDR, SIEM, and identity platforms, and uses AI tools to accelerate analysis.

Incident Response Threat Hunting SentinelOne Wazuh OpenSearch JumpCloud Python AI Tools Google Workspace PowerShell

Senior Cybersecurity Analyst / Security Consultant

PacketWatch

Apr 2023 - Jul 2026 (3 years 3 months)

Served as dedicated security consultant for enterprise clients, leading incident response engagements end-to-end and responding to ransomware incidents with outside counsel and cyber insurance carriers. Conducted proactive threat hunts and developed client-specific playbooks.

Incident Response Threat Hunting Crowdstrike SentinelOne Velociraptor Python MITRE ATT&CK Phishing Analysis Malware Analysis Security Consulting

Security Analyst III, Incident Response

Tokio Marine North America Services

Aug 2021 - Apr 2023 (1 year 8 months)

Owned major incident response efforts across enterprise environments, including Microsoft 365 and Entra ID compromises. Built a threat hunting program from the ground up and mentored junior analysts.

Incident Response Threat Hunting Microsoft 365 Entra ID KQL Python EDR SIEM Packet Analysis Mentorship

Security Analyst

Global Market Innovators (GMI)

Jan 2021 - Aug 2021 (7 months)

Conducted threat hunting, phishing analysis, and incident response within managed customer environments in an MSSP setting. Monitored and triaged security alerts and produced weekly threat intelligence briefings.

Threat Hunting Incident Response Phishing Analysis Security Monitoring Threat Intelligence

Cybersecurity Analyst

Alagen, LLC

Aug 2019 - Jan 2021 (1 year 5 months)

Performed security monitoring, alert triage, phishing analysis, and threat hunting for multiple customer environments. Team transitioned to GMI following acquisition.

Security Monitoring Alert Triage Phishing Analysis Threat Hunting

Cybersecurity Analyst

Ally Financial

Jun 2018 - Aug 2019 (1 year 2 months)

Monitored and triaged SIEM alerts in a SOC, escalating suspicious activity. Analyzed malware samples and investigated phishing emails to reduce credential theft risk.

SIEM SOC Malware Analysis Phishing Analysis Alert Triage