At The Christian Broadcasting Network, I investigate and resolve approximately 100+ monthly Arctic Wolf, endpoint, malware, and suspicious-process alerts. I validate evidence, document findings, and complete remediation or escalation actions.
I investigate potential account compromise through authentication and Microsoft Entra ID sign-in logs, then help contain suspicious activity with password resets, account disabling, token revocation, and session termination. I also remediate vulnerabilities across roughly 300 Windows and Linux servers and validate the changes.
On an independent project, I designed and built a home security operations center and RAG lab using Wazuh and Linux virtual machines. I also developed PowerShell automation used by the company and support identity administration, infrastructure hardening, and controlled production changes.
