At Waccamaw Telecommunications Systems, I investigate security events across 70 client environments using Cynet SIEM and EDR. I triage alerts across endpoint, identity, and network telemetry and administer EDR across 2,000+ endpoints.
I investigate Microsoft 365 account compromises and BEC cases, then contain threats by blocking sign-ins, resetting credentials, and removing rogue devices. For workstation compromises, I isolate hosts and reconstruct timelines to trace root causes.
I also harden client email and identity security, including SPF, DKIM, and DMARC enforcement, MFA posture, and Privileged Identity Management. I coordinate live incident remediation with client stakeholders and write client-facing reports covering scope, root cause, remediation, and hardening recommendations.
