At TENELEx, I configure Splunk and Wazuh pipelines for Windows and Active Directory visibility. I investigate suspicious authentication activity using Windows Event Logs and Sysmon, identifying patterns consistent with unauthorized access and potential account compromise.
I build Splunk queries to detect failed logins and abnormal process behavior, then correlate authentication, endpoint, and Wireshark PCAP activity to reconstruct suspicious patterns. I also use controlled attack simulations with Kali Linux and Metasploit to generate detection-relevant telemetry.
For web and cloud security, I configured ModSecurity rules to detect and block SQL injection and XSS, and investigated AWS CloudTrail activity for incident analysis. I document findings and escalate suspicious activity based on risk and impact.
Through the TripleTen Cybersecurity Program, I tested web vulnerabilities and performed Nessus scans. I also conducted vulnerability assessments for MegaQuagga Infrastructure and developed a NIST-aligned incident response plan for Capybara Unlimited. I'm CompTIA Security+ certified, and my M.S. in Cybersecurity, with an AI Security concentration, is expected in 2028.
