Looking for a job

Maximiliano Medina

@maximilianomedina1

Message

SOC Analyst at Telecentro building n8n security automations to enrich and score alerts.

Argentina

Message

At Telecentro, I build n8n SOAR automations that integrate Carbon Black EDR, IRIS, VirusTotal, MalwareBazaar, and Microsoft Teams to automate alert triage and reduce response times. I also design enrichment and scoring pipelines to classify alerts and reduce false positives.

At Accenture, I led Threat Hunting initiatives and designed a custom framework. I built queries and use cases in Splunk, CrowdStrike, and QRadar, and helped translate threat intelligence into actionable detections.

Earlier, I supported security operations across airline and financial environments, including SWIFT. I co-designed MITRE ATT&CK-aligned use cases, hunted IOCs, and optimized incident response workflows with XSOAR.

Experience

Work history, roles, and key accomplishments

Current

SOC Analyst | Security Automation (SOAR) & Detection Engineering

Current

Telecentro

Oct 2025 - Present (1 year)

Builds SOAR automations in n8n integrating Carbon Black EDR, IRIS, VirusTotal, MalwareBazaar and Microsoft Teams to automate alert triage and reduce response times. Designs automated threat enrichment and scoring pipelines to classify alerts and reduce false positives.

N8n Carbon Black EDR DFIR IRIS Virus Total MalwareBazaar Microsoft Teams RSA NetWitness Threat Hunting Sigma YARA IDS Phishing Analysis

Threat Hunter Lead

Accenture

Mar 2023 - Oct 2025 (2 years 7 months)

Led Threat Hunting initiatives against advanced threats, building risk-based hypotheses and testing TTPs with Cymulate. Analyzed threat actors and malware, feeding intelligence into incident response and designing a custom Threat Hunting framework.

Threat Hunting Cymulate LockBit Gamaredon Medusa QakBot IcedID RaccoonStealer Splunk Crowdstrike QRadar Qualys MITRE ATT&CK IOC TTP

SOC Analyst L2, Strategic Project for an International Airline

Accenture

Dec 2021 - Mar 2023 (1 year 3 months)

Led security operations and process improvement for a global airline, managing a team of 6 analysts. Hunted and mitigated IOCs in real time with CrowdStrike and QRadar, and co-designed MITRE ATT&CK-aligned detection use cases.

Crowdstrike QRadar XSOAR Cisco Stealthwatch MITRE ATT&CK Team Leadership Incident Response

SOC Analyst L2, Multinational Financial Institution

Accenture

Aug 2021 - Mar 2023 (1 year 7 months)

Mentored and supervised Level 1 analysts, performed Threat Hunting in Splunk and IOC searches across Symantec EDR, Arbor, F5 and DarkTrace. Designed use cases for the SWIFT environment and custom dashboards for security cells.

Splunk Symantec EDR Arbor Darktrace Dridex TrickBot Emotet AgentTesla Swift MITRE ATT&CK Microsoft Teams

SOC Analyst L1

RANSecurity

Oct 2020 - Jul 2021 (9 months)

Monitored McAfee ePO, McAfee SIEM, McAfee ATD and BlackBerry Cylance, building queries and client reports. Managed Clearswift SECURE Email Gateway and analyzed malware with VirusTotal and Hybrid Analysis.

McAfee EPO SIEM McAfee Advanced Threat Defense Cylance Clearswift Virus Total Hybrid Analysis Malware Analysis

IT Help Desk L1–L2

SanCorSalud

Mar 2018 - Oct 2020 (2 years 7 months)

Administered G Suite and Active Directory on Windows Server, monitored Fortinet VPN/MPLS networks, and provided Windows 10, Office, Android, Lexmark printer and Dell hardware support.

Google Workspace Active Directory Windows Server Fortinet VPN MPLS Windows 10 Office Android Lexmark Dell

Onsite IT Support

Coty Inc.

Oct 2015 - Oct 2017 (2 years)

Supported 40+ users onsite with Windows 7/10, Office 365, OneDrive, Lync and Salesforce. Managed AD user provisioning, IBM backup tapes, Veeam and CA Server monitoring, and hardware inventory.