Open to opportunities

Jeevee Balangan

@jeeveebalangan

Message

Security analyst specializing in SIEM investigations, threat detection, and incident response.

United States

Message

What I'm looking for

I am seeking a hands-on security operations or incident response role where I can improve detections, perform thorough investigations, and contribute to a collaborative SOC focused on continuous improvement.

I am a Security Analyst experienced in SIEM-based alert investigation, multi-source log correlation, and incident analysis across endpoint, network, and authentication telemetry. I map observed adversary behavior to MITRE ATT&CK techniques and reconstruct attack timelines to identify indicators of compromise.

At TENELEx Command Center I built and operated a security operations environment, tuned detections, validated coverage through adversary emulation, and analyzed PCAP network traffic with Wireshark to reconstruct intrusion activity. In the TripleTen Cybersecurity Program I developed and executed Splunk queries, performed alert triage, and produced formal incident triage reports with remediation recommendations.

I hold CompTIA Security+ certification and practical experience with Splunk, Wazuh, CrowdStrike Falcon, Microsoft Defender, Kali Linux tools, and scripting in Python, Bash, and PowerShell. I communicate technical concepts clearly, maintain structured documentation, and coordinate cross-functional workflows to improve detection quality and incident response.

Experience

Work history, roles, and key accomplishments

Current

Security Operations Analyst

Current

TENELEx Command Center

Jan 2024 - Present (2 years 2 months)

Built and operated a Security Operations environment, investigated SIEM alerts across endpoint, network, and authentication telemetry, and reconstructed attack timelines to identify indicators of compromise and guide escalation.

SIEM Wazuh Wireshark Detection Tuning

Current

Independent Project Manager

Current

Samonte Productions

Jan 2014 - Present (12 years 2 months)

Managed operational workflows, coordinated timelines and cross-functional communication, and maintained structured documentation processes for production projects.

Project Management Documentation

Security Analyst

TripleTen Cybersecurity Program

Jan 2024 - Jan 2026 (2 years)

Conducted investigations of web application attacks and credential abuse, developed Splunk queries to detect anomalous behavior, and produced triage reports mapping activity to MITRE ATT&CK with remediation recommendations.

Splunk Web Application Attack Analysis Triage ATT&CK Mapping CyberChef

Teaching Artist

Youth on Record

Jan 2022 - Jan 2025 (3 years)

Communicated complex technical concepts to diverse audiences and maintained structured documentation and operational processes within collaborative teams to support program delivery.

Technical Communication Documentation Team Collaboration