Looking for a job

Maximiliano Medina

@maximilianomedina1

Message

SOC Analyst at Telecentro building n8n security automations to enrich and score alerts.

Argentina

Message

At Telecentro, I build n8n SOAR automations that integrate Carbon Black EDR, IRIS, VirusTotal, MalwareBazaar, and Microsoft Teams to automate alert triage and reduce response times. I also design enrichment and scoring pipelines to classify alerts and reduce false positives.

At Accenture, I led Threat Hunting initiatives and designed a custom framework. I built queries and use cases in Splunk, CrowdStrike, and QRadar, and helped translate threat intelligence into actionable detections.

Earlier, I supported security operations across airline and financial environments, including SWIFT. I co-designed MITRE ATT&CK-aligned use cases, hunted IOCs, and optimized incident response workflows with XSOAR.

Experience

Work history, roles, and key accomplishments

Current

SOC Analyst | Security Automation (SOAR) & Detection Engineering

Current

Telecentro

Oct 2025 - Present (1 year 1 month)

Builds SOAR automations in n8n integrating Carbon Black EDR, IRIS, VirusTotal, MalwareBazaar and Microsoft Teams to automate alert triage and reduce response times. Designs automated threat enrichment and scoring pipelines to classify alerts and reduce false positives.

N8n

Carbon Black EDR

DFIR IRIS

Virus Total

MalwareBazaar

Microsoft Teams

RSA NetWitness

Threat Hunting Sigma YARA IDS Phishing Analysis

Threat Hunter Lead

Accenture

Mar 2023 - Oct 2025 (2 years 7 months)

Led Threat Hunting initiatives against advanced threats, building risk-based hypotheses and testing TTPs with Cymulate. Analyzed threat actors and malware, feeding intelligence into incident response and designing a custom Threat Hunting framework.

Threat Hunting

Cymulate

LockBit

Gamaredon

Medusa

QakBot

IcedID

RaccoonStealer

Splunk Crowdstrike QRadar Qualys MITRE ATT&CK

IOC

TTP

SOC Analyst L2, Strategic Project for an International Airline

Accenture

Dec 2021 - Mar 2023 (1 year 3 months)

Led security operations and process improvement for a global airline, managing a team of 6 analysts. Hunted and mitigated IOCs in real time with CrowdStrike and QRadar, and co-designed MITRE ATT&CK-aligned detection use cases.

Crowdstrike QRadar XSOAR

Cisco Stealthwatch

MITRE ATT&CK Team Leadership Incident Response

SOC Analyst L2, Multinational Financial Institution

Accenture

Aug 2021 - Mar 2023 (1 year 7 months)

Mentored and supervised Level 1 analysts, performed Threat Hunting in Splunk and IOC searches across Symantec EDR, Arbor, F5 and DarkTrace. Designed use cases for the SWIFT environment and custom dashboards for security cells.

Splunk

Symantec EDR

Arbor

Darktrace

Dridex

TrickBot

Emotet

AgentTesla

Swift MITRE ATT&CK Microsoft Teams

SOC Analyst L1

RANSecurity

Oct 2020 - Jul 2021 (9 months)

Monitored McAfee ePO, McAfee SIEM, McAfee ATD and BlackBerry Cylance, building queries and client reports. Managed Clearswift SECURE Email Gateway and analyzed malware with VirusTotal and Hybrid Analysis.

McAfee EPO

SIEM

McAfee Advanced Threat Defense

Cylance

Clearswift

Virus Total

Hybrid Analysis

Malware Analysis

IT Help Desk L1–L2

SanCorSalud

Mar 2018 - Oct 2020 (2 years 7 months)

Administered G Suite and Active Directory on Windows Server, monitored Fortinet VPN/MPLS networks, and provided Windows 10, Office, Android, Lexmark printer and Dell hardware support.

Google Workspace Active Directory Windows Server Fortinet VPN MPLS Windows 10 Office Android

Lexmark

Dell

Onsite IT Support

Coty Inc.

Oct 2015 - Oct 2017 (2 years)

Supported 40+ users onsite with Windows 7/10, Office 365, OneDrive, Lync and Salesforce. Managed AD user provisioning, IBM backup tapes, Veeam and CA Server monitoring, and hardware inventory.

Win7 Windows 10 Office 365 One Drive

Lync

Salesforce Active Directory IBM Veeam

CA Server

Hardware Asset Management